Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9Wasmtime is a runtime for WebAssembly.Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Feb 24, 2026
- High7.5Fiber is an Express inspired web framework written in Go.Feb 24, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Feb 24, 2026
- High7.5ImageMagick is free and open-source software used for editing and manipulating digital images.Feb 24, 2026
- High7.5Astro is a web framework.Feb 24, 2026
- Medium6.5A denial-of-service vulnerability was identified in Moodle’s TeX formula editor.Feb 21, 2026
- Medium6.9pypdf is a free and open-source pure-python PDF library.Feb 20, 2026
- Medium6.6CoreDNS is a DNS server that chains plugins.EPSS 0.5%Jan 8, 2026
- Medium4.6An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.4%Jan 2, 2026
- Medium4.9An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.3%Jan 2, 2026
- Medium5.3quic-go is an implementation of the QUIC protocol in Go.EPSS 0.4%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an a…EPSS 0.3%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 6.3 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an aut…EPSS 0.3%Dec 11, 2025
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an u…EPSS 0.9%Dec 11, 2025
- High8.7A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service.EPSS 0.4%Dec 9, 2025
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.EPSS 2.3%Sep 2, 2025
- Medium5.9A flaw was found in the OpenSSH package.EPSS 40.6%Feb 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface…EPSS 0.3%Sep 18, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmam_free_coherent dmam_free_coherent() frees a DMA allocation, which makes…EPSS 0.4%Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzkaller reports a warning in __xdp_reg_mem_model().EPSS 0.2%Jul 29, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either alloca…EPSS 0.2%Jul 5, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock It needs to cover…EPSS 0.2%Jun 24, 2024
- High8.8In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifaddr walks i…EPSS 0.4%May 20, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhost_worker will call tun call ba…EPSS 0.3%May 1, 2024