Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via craft…Oct 15, 2026
- Medium6.9GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSe…Oct 15, 2026
- Medium6.9FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modula…Oct 15, 2026
- High7.4undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium6.5Python Social Auth is a social authentication/registration mechanism.Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium6.3ammonia is a Rust library for repairing and securing untrusted HTML.Oct 15, 2026
- Medium5.7OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Oct 15, 2026
- Critical9.3ipv4: validate checksum_start before completing checksumOct 15, 2026
- Unknownipv4: free inet_opt and ireq_opt after an RCU grace periodOct 15, 2026
- High8.2FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy.EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memoryEPSS 0.3%Oct 14, 2026
- High7.1FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST.EPSS 0.3%Oct 14, 2026
- High7.1Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.EPSS 0.3%Oct 14, 2026
- High8.7Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection RegexesEPSS 0.3%Oct 14, 2026
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateEPSS 0.3%Oct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.EPSS 0.2%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Low3.6Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).EPSS 0.1%Oct 14, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
50 records · page 1 of 2
PreviousNext