Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Incus is a system container and virtual machine manager.May 7, 2026
- High8.3Improperly controlled modification of Dynamically-Determined object attributes, Allocation of resources without limits or throttling vulnerability in DivvyDrive Inform…EPSS 0.2%May 7, 2026
- High8.3monetr is a budgeting application for recurring expenses.May 7, 2026
- Medium5.9OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP.May 6, 2026
- Medium5.9OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments.May 6, 2026
- Medium5.3OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry.May 6, 2026
- Medium6.9A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g.May 6, 2026
- High8.7CoreDNS is a DNS server that chains plugins.May 5, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling.May 5, 2026
- High7.5An issue was discovered in MM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, W920, W9…EPSS 0.3%May 5, 2026
- High7.3Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data.May 5, 2026
- High8.2OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without p…May 5, 2026
- High7.5Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes.May 4, 2026
- High7.5@fastify/accepts-serializer cached serializer-selection results keyed by the request Accept header without a size limit or eviction policy.May 4, 2026
- High8.7n8n is an open source workflow automation platform.May 4, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.May 4, 2026
- High7.5OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: Th…May 4, 2026
- Medium5.9An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray()EPSS 0.5%May 4, 2026
- High7.5An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() methodEPSS 0.4%May 4, 2026
- Medium4.9Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel.May 4, 2026
- Medium6.9Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated memory exhaustion via oversized HTTP/2 frames.May 1, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion.May 1, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion when WebSock…May 1, 2026
- High7.5An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5.May 1, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial…EPSS 0.2%Apr 30, 2026