Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownCVE-2026-39044Jun 16, 2026
- High7.6A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good.Jun 15, 2026
- High7.1A signed integer overflow vulnerability was found in GStreamer's VMnc decoder.Jun 15, 2026
- High8.8A heap buffer overflow vulnerability was found in GStreamer's librfb (RFB/VNC client).Jun 15, 2026
- High7.1An out-of-bounds read vulnerability was found in the VA JPEG decoder in GStreamer's gst-plugins-bad.Jun 15, 2026
- Medium6.5A denial of service vulnerability was found in GStreamer's AV1 codec parser in gst-plugins-bad.Jun 15, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Jun 11, 2026
- High7.5An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function.EPSS 0.2%Mar 23, 2026
- High8.8GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.Mar 16, 2026
- Medium5.3When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardless of theEPSS 0.6%Jan 21, 2026
- UnknownThe imaplib module, when passed a user-controlled command, can have additional commands injected using newlines.EPSS 0.4%Jan 20, 2026
- High7.5can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivateEPSS 0.6%Mar 27, 2025
- High7.5A flaw was found in Blender 3.3.0.EPSS 1.7%Aug 16, 2022
- Critical9.8It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/pubEPSS 1.6%Feb 11, 2022
- Medium5.3The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter.EPSS 2.8%Jun 7, 2018
- High7.1The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a craftedEPSS 2.8%Feb 3, 2017
- Critical10.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confideEPSS 7.2%Jan 21, 2016
93 records · page 4 of 4
PreviousNext