Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy.EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memoryEPSS 0.3%Oct 14, 2026
- High7.1FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST.EPSS 0.3%Oct 14, 2026
- High7.1Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.EPSS 0.3%Oct 14, 2026
- High8.7Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection RegexesEPSS 0.3%Oct 14, 2026
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateEPSS 0.3%Oct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.EPSS 0.2%Oct 14, 2026
- Medium5.7A flaw was found in evolution-data-server.EPSS 0.4%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Low3.6Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).EPSS 0.1%Oct 14, 2026
- Medium6.8unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet headeEPSS 0.2%Oct 14, 2026
- Medium5.8libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read erEPSS 0.2%Oct 14, 2026
- Medium5.5A flaw was found in the clevis PKCS#11 pin.EPSS 0.1%Oct 14, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.EPSS 0.1%Oct 14, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.EPSS 0.1%Oct 14, 2026
- Medium4.7A flaw was found in the clevis PKCS#11 pin.EPSS 0.1%Oct 14, 2026
- High7.0KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into theEPSS 1.0%Oct 13, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toEPSS 0.2%Oct 13, 2026