Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Low3.6Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message).CVE-2026-110736 · CVE.org · FIRST EPSS · NIST NVD · Debian, Debian 12EPSS 0.1%Oct 14, 2026
High8.0MariaDB server is a community developed fork of MySQL server.CVE-2026-107821 · mariadb · mariadb · CVE.org · FIRST EPSS · NIST NVD · MariaDB, MySQLEPSS 0.8%Oct 9, 2026
Medium6.0The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation.CVE-2026-9100 · mongodb · c driver · CVE.org · NIST NVD · MongoDBMay 20, 2026
High7.5vm2 is an open source vm/sandbox for Node.js.CVE-2026-44004 · vm2 project · vm2 · CVE.org · NIST NVD · Node.jsMay 13, 2026
Medium5.3Memory Allocation with Excessive Size Value vulnerability in Apache Thrift.CVE-2026-43868 · apache · thrift · CVE.org · NIST NVD · ApacheMay 5, 2026
High7.7Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.CVE-2026-40886 · argoproj · argo workflows · CVE.org · NIST NVD · KubernetesApr 23, 2026
Critical9.1A possible security vulnerability has been identified in Apache Kafka.CVE-2026-33557 · apache · kafka · CVE.org · NIST NVD · ApacheApr 20, 2026
Medium6.8Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to th…CVE-2018-25232 · softros · softros lan messenger · CVE.org · NIST NVDMar 30, 2026
High7.5The DataRow.Decode function fails to properly validate field lengths.CVE-2026-32286 · jackc · pgproto3 · CVE.org · NIST NVDMar 26, 2026
High7.5The Delete function fails to properly validate offsets when processing malformed JSON input.CVE-2026-32285 · jsonparser project · jsonparser · CVE.org · NIST NVDMar 26, 2026
Medium6.9Blob Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key entry mechanism.CVE-2019-25625 · pixarra · blob studio · CVE.org · NIST NVDMar 23, 2026
Medium6.9Paint Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the key entry mechanism.CVE-2019-25622 · pixarra · paint studio · CVE.org · NIST NVDMar 23, 2026
Medium6.8jetCast Server 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Log d…CVE-2019-25593 · CVE.org · NIST NVDMar 22, 2026
Medium5.9Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric CNC M800V Series M800VW and M800VS, M80V Series M80V and M80V…CVE-2025-2399 · CVE.org · NIST NVDMar 10, 2026
Medium6.7In MAE, there is a possible out of bounds write due to a missing bounds check.CVE-2026-20440 · google · android · CVE.org · NIST NVD · Android, GoogleMar 2, 2026
High7.8Microsoft Windows CLFS Driver Privilege Escalation VulnerabilityCVE-2022-24521 · microsoft · windows 10 1507 · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsKEVEPSS 7.1%Apr 13, 2022
High7.8Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-1647 · microsoft · windows defender · CISA KEV · CVE.org · FIRST EPSS · Microsoft, WindowsKEVEPSS 39.4%Jan 12, 2021