Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VL…EPSS 0.4%Mar 25, 2026
- Medium6.9Nanoleaf Lines 12.3.2 does not authenticate firmware file uploads.Mar 25, 2026
- High7.5The issue was addressed with improved checks.Mar 25, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Mar 24, 2026
- Medium6.5ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component.Mar 24, 2026
- High7.5An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMFMar 24, 2026
- High7.5Denial-of-service in the Libraries component in NSS.Mar 24, 2026
- High7.5Denial-of-service in the XML component.Mar 24, 2026
- High7.5Denial-of-service in the WebRTC: Signaling component.Mar 24, 2026
- Medium6.6Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Mar 24, 2026
- Medium6.9Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Mar 24, 2026
- Low1.9A security flaw has been discovered in pygments up to 2.19.2.Mar 22, 2026
- High7.5SimpleJWT is a simple JSON web token library written in PHP.Mar 20, 2026
- High8.7DeepDiff is a project focused on Deep Difference and search of any Python data.Mar 20, 2026
- Medium5.1pypdf is a free and open-source pure-python PDF library.Mar 20, 2026
- High7.5ASP.NET Core Kestrel in Microsoft .NET 8.0 before 8.0.22 and .NET 9.0 before 9.0.11 allows a remote attacker to cause excessive CPU consumption by sending a crafted QU…Mar 19, 2026
- High7.5An issue in the VirtualHost configuration handling/parser component of aaPanel v7.57.0 allows attackers to cause a Regular Expression Denial of Service (ReDoS) via a crafted input.Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Mar 18, 2026
- High7.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Mar 17, 2026
- Medium6.5In Forgejo through 13.0.3, the attachment component allows a denial of service by uploading a multi-gigabyte file attachment (e.g., to be associated with an issue or a release).EPSS 0.5%Mar 16, 2026
- High7.5An issue in GoBGP gobgpd v.4.2.0 allows a remote attacker to cause a denial of service via the NEXT_HOP path attributeMar 16, 2026
- High7.5HCL AION is affected by a vulnerability related to the handling of upload size limits.EPSS 0.1%Mar 16, 2026
- Low1.9A vulnerability has been found in Radare2 5.9.9.Mar 16, 2026
- Medium6.5Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Mar 13, 2026