Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize EndpointOct 14, 2026
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Oct 14, 2026
- High7.5The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients.Oct 14, 2026
- High7.5The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients.Oct 14, 2026
- High7.1An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to…Oct 14, 2026
- High7.1An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS Evolved platforms…Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost.Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.Oct 14, 2026
- High8.2Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Oct 14, 2026
- Medium4.3Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas.Oct 14, 2026
- Medium5.3BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before enforcing the 5 MB limit.Oct 14, 2026
- Medium6.8OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files.Oct 14, 2026
- Medium4.8OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying cra…Oct 14, 2026
- Medium5.3Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network.EPSS 0.5%Oct 13, 2026
- High7.1FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized d…EPSS 0.3%Oct 13, 2026
- High8.7SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_fram…EPSS 0.5%Oct 12, 2026
- High8.7LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk…EPSS 0.4%Oct 12, 2026
- Medium6.9Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint.EPSS 0.3%Oct 11, 2026
- High8.7MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSo…EPSS 0.4%Oct 11, 2026
- Medium5.3Contao: The registration module re-sends activation mailsEPSS 0.3%Oct 9, 2026
- High7.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…EPSS 0.4%Oct 8, 2026
- Medium6.9Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption (CPU and RAM), leading to conditions for a De…EPSS 0.3%Oct 6, 2026
- Medium5.3IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive reso…EPSS 0.4%Sep 22, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditio…EPSS 0.5%Sep 16, 2026
- High7.5Microsoft.OpenApi.YamlReader vulnerable to denial of service via YAML alias expansionEPSS 1.2%Sep 8, 2026
77 records · page 1 of 4
PreviousNext