Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5A flaw was found in Netty's HTTP/2 codec.Sep 18, 2026
- High8.8Backstage is an open framework for building developer portals.EPSS 1.2%Sep 16, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.EPSS 0.4%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.EPSS 0.2%Aug 24, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.EPSS 0.4%Aug 21, 2026
- Critical9.3PTC Windchill and FlexPLM Improper Input Validation VulnerabilityKEVEPSS 46.0%Jun 17, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authori…EPSS 0.4%Jun 1, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.EPSS 0.7%May 27, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.EPSS 0.7%May 27, 2026
- High7.7free5GC is an open-source implementation of the 5G core network.EPSS 0.4%May 27, 2026
- High7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to p…EPSS 0.6%May 27, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityKEVEPSS 45.8%May 21, 2026
- Critical9.6Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.EPSS 0.4%May 19, 2026
- Medium6.5Improper Input Validation vulnerability in Apache OFBiz.EPSS 0.7%May 19, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%May 18, 2026
- Medium5.4Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.EPSS 0.4%May 18, 2026
- Medium5.5A security flaw has been discovered in h2oai h2o-3 up to 7402.EPSS 0.4%May 17, 2026
- High8.7Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege.EPSS 0.2%May 12, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityKEVEPSS 2.5%May 7, 2026
- High7.3Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.EPSS 0.4%Apr 14, 2026
- Medium4.4Improper input validation in Windows Hello allows an authorized attacker to bypass a security feature locally.EPSS 0.4%Apr 14, 2026
- High7.8Improper input validation in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.8Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.8Heap-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code locally.EPSS 0.5%Apr 14, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityKEVEPSS 43.4%Apr 14, 2026