Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.EPSS 0.2%Oct 12, 2026
- Medium5.4Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions.EPSS 0.4%Oct 12, 2026
- UnknownInternal error terms inspected into AshTypescript RPC error responsesEPSS 0.3%Oct 12, 2026
- Low2.0A weakness has been identified in y_project RuoYi up to 4.8.3.EPSS 0.2%Oct 12, 2026
- Low2.1A security flaw has been discovered in zhayujie CowAgent up to 2.2.0.EPSS 0.5%Oct 11, 2026
- Low3.4The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion.EPSS 0.1%Oct 11, 2026
- Medium5.3Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionEPSS 0.3%Oct 11, 2026
- Medium5.4In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value…EPSS 0.2%Oct 10, 2026
- Medium5.4In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as…EPSS 0.2%Oct 10, 2026
- Medium5.1jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalid…EPSS 0.2%Oct 8, 2026
- HighCairoSVG: Quadratic-time DoS parsing a crafted SVGEPSS 0.4%Oct 8, 2026
- Medium6.9A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1.EPSS 0.1%Oct 8, 2026
- High7.8A flaw was found in Ghostscript.EPSS 0.2%Oct 6, 2026
- Medium4.7Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory o…EPSS 0.2%Oct 6, 2026
- Medium4.2Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation…EPSS 0.2%Oct 6, 2026
- Medium5.3Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive infor…EPSS 0.2%Oct 6, 2026
- High8.3Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social eng…EPSS 0.3%Oct 6, 2026
- Medium6.1Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access rest…EPSS 0.2%Oct 6, 2026
- Medium5.3Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensi…EPSS 0.3%Oct 6, 2026
- Medium4.2Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via…EPSS 0.2%Oct 6, 2026
- Medium5.4Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social en…EPSS 0.2%Oct 6, 2026
- Medium5.3Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain s…EPSS 0.2%Oct 6, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresEPSS 0.3%Oct 5, 2026
- Medium5.3Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values ar…EPSS 0.2%Oct 5, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026