Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Jellyfin is an open source self hosted media server.Apr 14, 2026
- Low2.4ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.Apr 14, 2026
- Low2.4ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.Apr 14, 2026
- High7.5Loop with unreachable exit condition ('infinite loop') in .NET, .NET Framework, Visual Studio allows an unauthorized attacker to deny service over a network.Apr 14, 2026
- High7.5Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.Apr 14, 2026
- Medium5.3CWE-400 Uncontrolled Resource Consumption vulnerability exists that could cause excessive troubleshooting zip file creation and denial of service when a Web Admin user…Apr 14, 2026
- High7.5An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via s…Apr 13, 2026
- High7.5Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.Apr 10, 2026
- Medium5.5A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1.Apr 9, 2026
- High7.5A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-se…Apr 8, 2026
- Medium5.3LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Apr 8, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Apr 8, 2026
- Medium5.9Axios is a promise based HTTP client for the browser and Node.js.Apr 8, 2026
- High7.5Aardvark-dns is an authoritative dns server for A/AAAA container records.Apr 7, 2026
- Critical9.1Podman Desktop is a graphical tool for developing on containers and Kubernetes.Apr 7, 2026
- Medium6.5Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.Apr 7, 2026
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- Medium6.2In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhaustion.EPSS 0.1%Apr 6, 2026
- Critical9.1An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 25…EPSS 0.3%Apr 6, 2026
- High7.5An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2…EPSS 0.3%Apr 6, 2026
- High7.5An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580,…EPSS 0.3%Apr 6, 2026
- High7.5Fedify is a TypeScript library for building federated server apps powered by ActivityPub.Apr 6, 2026
- Medium4.3An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php fileApr 3, 2026
- High8.7Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using…EPSS 0.4%Apr 2, 2026
- High8.7Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment.EPSS 0.4%Apr 2, 2026