Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Apr 29, 2026
- Medium5.3Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.Apr 29, 2026
- Medium6.5A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.Apr 29, 2026
- Medium6.5In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by .Apr 28, 2026
- Medium4.4A handling issue in the RTSP service of the Mercury MIPC252W 1.0.5 Build 230306 Rel.79931n allows an authenticated attacker to trigger session termination by repeatedl…Apr 27, 2026
- High7.5An issue in the /store/items/search endpoint of Agent Protocol server commit e9a89f allows attackers to cause a Denial of Service (DoS) via a crafted POST request.Apr 27, 2026
- High8.7Marked is a markdown parser and compiler.Apr 24, 2026
- Medium5.3An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Checkout Authentication Flow componentApr 24, 2026
- Low3.8An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Balance componentApr 24, 2026
- High7.5Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.Apr 24, 2026
- High7.5basic-ftp is an FTP client for Node.js.Apr 24, 2026
- High8.2Open Source Social Network (OSSN) is open-source social networking software developed in PHP.Apr 24, 2026
- High7.5A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.Apr 22, 2026
- Medium5.5A flaw was found in the utility of the binutils package.Apr 22, 2026
- High7.5In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed th…Apr 22, 2026
- Medium4.9Tanium addressed an uncontrolled resource consumption vulnerability in Interact.Apr 22, 2026
- High8.7facil.io is a C micro-framework for web applications.Apr 22, 2026
- High7.5free5GC UDR is the Policy Control Function (PCF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks.Apr 22, 2026
- Medium5.3A vulnerability was identified in Sanluan PublicCMS up to 6.202506.d.Apr 21, 2026
- Medium6.5Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Apr 21, 2026
- Medium6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).Apr 21, 2026
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Apr 21, 2026
- Medium6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Apr 21, 2026
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Apr 21, 2026
- High7.5Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Apr 21, 2026