Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.Aug 20, 2026
- UnknownExpat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified atAug 18, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.Aug 14, 2026
- Medium6.1A flaw was found in GStreamer gst-plugins-good (avidemux).Aug 12, 2026
- Medium6.6A flaw was found in GStreamer gst-plugins-good (avidemux).Aug 12, 2026
- High7.1Buffer Overflow vulnerability in libjxl v.0.11.2 and before allows a local attacker to obtain sensitive information via the DecodeImageAPNG functionJul 17, 2026
- UnknownCVE-2026-39043Jun 16, 2026
- UnknownCVE-2026-39044Jun 16, 2026
- High7.6A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good.Jun 15, 2026
- High7.5An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function.Mar 23, 2026
- High8.8GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.Mar 16, 2026
- High7.5can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivateMar 27, 2025
- High7.5A flaw was found in Blender 3.3.0.EPSS 1.7%Aug 16, 2022
- Critical9.8It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/pubFeb 11, 2022
- Medium5.3The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter.Jun 7, 2018
- High7.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a craftedFeb 3, 2017
- Critical10.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confideJan 21, 2016
67 records · page 3 of 3
PreviousNext