Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3ipv4: validate checksum_start before completing checksumOct 15, 2026
- Unknownipv4: free inet_opt and ireq_opt after an RCU grace periodOct 15, 2026
- High8.2FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy.EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memoryEPSS 0.3%Oct 14, 2026
- High7.1FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST.EPSS 0.3%Oct 14, 2026
- High7.1Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.EPSS 0.3%Oct 14, 2026
- High8.7Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection RegexesEPSS 0.3%Oct 14, 2026
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateEPSS 0.3%Oct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.EPSS 0.2%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Low3.6Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).EPSS 0.1%Oct 14, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- Medium4.2Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering toEPSS 0.2%Oct 13, 2026
- High8.3Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandboxEPSS 0.3%Oct 13, 2026
- High8.8Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- Medium5.5Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program.EPSS 0.1%Oct 13, 2026
- Medium4.3Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted fEPSS 0.2%Oct 13, 2026
- Critical9.6Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.Aug 14, 2026
36 records · page 1 of 2
PreviousNext