Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.1FreeRDP is a free implementation of the Remote Desktop Protocol.Mar 13, 2026
- High7.5HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attack…Mar 13, 2026
- High7.1Uncontrolled Resource Consumption vulnerability in hexpm hexpm/hexpm allows Excessive Allocation.Mar 13, 2026
- High8.7Tornado is a Python web framework and asynchronous networking library.Mar 11, 2026
- Medium5.5iccDEV provides a set of libraries and tools for working with ICC color management profiles.Mar 10, 2026
- High7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2.EPSS 0.4%Mar 9, 2026
- High7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial of service.EPSS 0.4%Mar 9, 2026
- High7.5A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11), interpreter using the o…EPSS 0.3%Mar 6, 2026
- Medium5.5Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data.EPSS 0.2%Mar 6, 2026
- Medium5.5Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information.EPSS 0.2%Mar 6, 2026
- Medium5.0An issue was discovered in Binutils before 2.46.EPSS 0.1%Mar 6, 2026
- High7.5CoreDNS is a DNS server that chains plugins.Mar 6, 2026
- Medium4.3melange allows users to build apk packages using declarative pipelines.Mar 6, 2026
- High7.5OliveTin gives access to predefined shell commands from a web interface.Mar 5, 2026
- High7.5OliveTin gives access to predefined shell commands from a web interface.Mar 5, 2026
- High7.5Traefik is an HTTP reverse proxy and load balancer.Mar 5, 2026
- High8.2python-markdown: denial of service via malformed HTML-like sequencesEPSS 0.6%Mar 5, 2026
- High7.5In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is…EPSS 0.7%Mar 5, 2026
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Mar 4, 2026
- Medium5.8Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detec…EPSS 0.5%Mar 4, 2026
- High7.6A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs.Mar 4, 2026
- High7.5An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi trans…Mar 4, 2026
- High7.5An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Mar 3, 2026
- Critical9.1In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error.EPSS 0.3%Mar 2, 2026
- High7.5Textream is a free macOS teleprompter app.Mar 2, 2026