Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length d…EPSS 0.2%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered byte…EPSS 0.3%Oct 15, 2026
- High8.7Allocation of Resources Without Limits or ThrottlingEPSS 0.3%Oct 15, 2026
- High7.0The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.EPSS 0.1%Oct 15, 2026
- High7.0The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream.EPSS 0.1%Oct 15, 2026
- High7.0The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.EPSS 0.1%Oct 15, 2026
- Medium5.5When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.EPSS 0.1%Oct 15, 2026
- High8.2When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter.EPSS 0.3%Oct 15, 2026
- Medium6.0Improper certificate validation in Cato Client tunnel handshakeEPSS 0.1%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect QcalAgent.EPSS 0.4%Oct 15, 2026
- High8.7A relative path traversal vulnerability has been reported to affect Download Station.EPSS 0.4%Oct 15, 2026
- Medium5.3Microsoft Identity Web Elevation of Privilege VulnerabilityEPSS 0.6%Oct 15, 2026
- Medium5.9Microsoft Authentication Library (MSAL) for Node.js Information Disclosure VulnerabilityEPSS 0.3%Oct 15, 2026
- Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.5%Oct 15, 2026
- Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.5%Oct 15, 2026
- Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.5%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.EPSS 0.3%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.EPSS 0.3%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.EPSS 0.3%Oct 15, 2026
- Medium5.3A path traversal vulnerability has been reported to affect Qsync Central.EPSS 0.4%Oct 15, 2026
- UnknownThe IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.EPSS 0.2%Oct 15, 2026
- Medium5.3An observable timing discrepancy vulnerability has been reported to affect QuRouter.EPSS 0.2%Oct 15, 2026
- Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.EPSS 0.4%Oct 15, 2026
- High7.5A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter.EPSS 0.2%Oct 15, 2026
- Medium4.6An external control of system or configuration setting vulnerability has been reported to affect QuRouter.EPSS 0.1%Oct 15, 2026