Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory o…EPSS 0.2%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES.EPSS 0.2%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS o…EPSS 0.2%Oct 14, 2026
- HighCairoSVG: Quadratic-time DoS parsing a crafted SVGOct 8, 2026
- Medium6.5In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of s…EPSS 0.3%Oct 7, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
- High8.7MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node identity creates a ledger entry and triggers all-pai…EPSS 0.8%Sep 3, 2026
- High7.5Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.Apr 15, 2026
- High7.5jq is a command-line JSON processor.Apr 14, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Apr 10, 2026
- Medium4.8A security flaw has been discovered in musl libc up to 1.2.6.Apr 10, 2026
- Medium6.5An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.Apr 7, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Apr 2, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 31, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Mar 25, 2026
- Medium5.1pypdf is a free and open-source pure-python PDF library.Mar 20, 2026
- Medium6.9pypdf is a free and open-source pure-python PDF library.Mar 6, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Feb 26, 2026
- Medium5.3A flaw was found in GnuTLS.EPSS 0.7%Feb 9, 2026
- High7.5An issue was discovered in Python before 3.11.1.EPSS 2.7%Nov 9, 2022
25 records · page 1 of 1
PreviousNext