Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.2CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to applica…May 12, 2026
- High7.5CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to applica…May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability…May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability…May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability…May 12, 2026
- High7.5Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability…May 12, 2026
- High7.5Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems.May 12, 2026
- High7.5phpseclib is a PHP secure communications library.May 12, 2026
- Medium4.3An attacker can cause uncontrolled memory usage with excessive bracing over IMAP.May 12, 2026
- Medium6.5Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit.May 12, 2026
- Medium6.2The issue was addressed with improved memory handling.May 11, 2026
- Medium4.9A denial-of-service issue was addressed with improved input validation.May 11, 2026
- High7.5A denial of service issue was addressed by removing the vulnerable code.May 11, 2026
- High7.5A resource exhaustion issue was addressed with improved input validation.May 11, 2026
- Medium5.5A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59.May 11, 2026
- High8.7Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation.May 11, 2026
- High7.5Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0.May 11, 2026
- High8.6The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth.EPSS 0.3%May 11, 2026
- Medium6.9A flaw has been found in Open5GS up to 2.7.7.May 9, 2026
- Medium6.3FastGPT is an AI Agent building platform.May 8, 2026
- High7.1SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM.May 8, 2026
- High7.5Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2.May 8, 2026
- High7.5Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB ser…May 8, 2026
- Medium5.3The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel m…May 8, 2026
- Low1.9A security vulnerability has been detected in GPAC up to 26.02.0.May 8, 2026