Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringEPSS 0.3%Oct 14, 2026
- Medium6.5vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied featuresOct 5, 2026
- Medium4.3Mattermost versions <=11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-actio…EPSS 0.4%Sep 14, 2026
- Medium6.5free5GC is an open-source implementation of the 5G core network.EPSS 0.7%May 27, 2026
- Medium6.5Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact.Feb 27, 2026
- Medium6.8psd-tools is a Python package for working with Adobe Photoshop PSD files.Feb 26, 2026
- High7.2An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Feb 24, 2026
- High7.2A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.Feb 24, 2026
- High7.5A flaw was found in python.EPSS 4.5%Sep 9, 2022
- Critical9.1The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted…EPSS 2.8%Jul 22, 2021
- High7.8Artifex Ghostscript Type Confusion VulnerabilityKEVEPSS 97.0%Apr 26, 2017
- High8.1Microsoft Edge and Internet Explorer Type Confusion VulnerabilityKEVEPSS 80.4%Feb 26, 2017
13 records · page 1 of 1
PreviousNext