Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High7.1Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabledCVE-2026-102072 · Juniper Networks · Junos OS · CIRCL Vulnerability Lookup · CVE.org · NIST NVDOct 14, 2026
High8.7The network messaging layer contained improper handling of highly compressed data affecting service availability.CVE-2026-97334 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Oct 13, 2026
Medium5.3OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents.CVE-2026-108750 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 11, 2026
High7.5AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabledCVE-2026-107227 · CVE.org · FIRST EPSS · GitHub Advisory Database · mavenEPSS 0.4%Oct 8, 2026
High8.7exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio.CVE-2026-78206 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.6%Aug 24, 2026
Medium6.5WeeChat (Wee Enhanced Environment for Chat) is a free chat client.CVE-2026-53524 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Aug 21, 2026
High8.2OmniFaces is a utility library for Faces.CVE-2026-102695 · CVE.org · GitHub Advisory Database · NIST NVD · mavenJul 24, 2026