Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3quic-go is an implementation of the QUIC protocol in Go.EPSS 0.4%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an a…EPSS 0.3%Dec 11, 2025
- Medium6.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 6.3 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an aut…EPSS 0.3%Dec 11, 2025
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an u…EPSS 0.9%Dec 11, 2025
- High8.7A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-of-service.EPSS 0.4%Dec 9, 2025
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.EPSS 2.3%Sep 2, 2025
- Medium5.9A flaw was found in the OpenSSH package.Feb 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface…Sep 18, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dma: fix call order in dmam_free_coherent dmam_free_coherent() frees a DMA allocation, which makes…Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xdp: Remove WARN() from __xdp_reg_mem_model() syzkaller reports a warning in __xdp_reg_mem_model().Jul 29, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either alloca…Jul 5, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock It needs to cover…Jun 24, 2024
- High8.8In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Although ipv6_get_ifaddr walks i…May 20, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tun: limit printing rate when illegal packet received by tun dev vhost_worker will call tun call ba…May 1, 2024
- Medium6.0In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() After unregistering the CPU id…Apr 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86, relocs: Ignore relocations in .notes section When building with CONFIG_XEN_PV=y, .text symbols…Apr 10, 2024
- Medium5.3nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.Apr 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: avoid online resizing failures due to oversized flex bg When we online resize an ext4 filesys…Mar 26, 2024
- Medium6.5Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow.EPSS 75.1%May 30, 2023
- Medium6.5An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server…EPSS 1.7%Feb 23, 2023
- High7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.EPSS 22.4%Nov 4, 2022
- Medium5.5A memory overflow vulnerability was found in the Linux kernel’s ipc functionality of the memcg subsystem, in the way a user calls the semget function multiple times, c…EPSS 0.4%Aug 23, 2022
- Medium6.5curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially with different algorithms.EPSS 33.1%Jul 7, 2022
- Medium4.3A malicious server can serve excessive amounts of headers in a HTTP response to curl and curl < 7.84.0 stores all of them.EPSS 27.9%Jul 7, 2022
- Medium5.5basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname…EPSS 8.8%Jul 20, 2021