Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.1In the Linux kernel, the following vulnerability has been resolved: cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() cxl_pa…EPSS 0.1%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1…EPSS 0.1%Mar 25, 2026
- High8.5NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to t…EPSS 0.3%Mar 24, 2026
- Medium5.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the…EPSS 0.2%Mar 24, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses.EPSS 0.3%Mar 24, 2026
- High8.5The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX wo…EPSS 1.0%Mar 24, 2026
- High8.8ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution VulnerabilityEPSS 25.1%Mar 24, 2026
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.EPSS 0.9%Mar 24, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.3%Mar 23, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 23, 2026
- High8.1WWBN AVideo is an open source video platform.EPSS 0.4%Mar 23, 2026
- High7.5WWBN AVideo is an open source video platform.EPSS 0.5%Mar 23, 2026
- High7.5NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.EPSS 1.5%Mar 20, 2026
- Medium4.8Halloy is an IRC application written in Rust.EPSS 0.1%Mar 20, 2026
- Medium5.4Jexactyl is a customisable game management panel and billing system.EPSS 0.2%Mar 20, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix page array leak d9f595b9a65e ("io_uring/zcrx: fix leaking pages on sg init fail"…EPSS 0.1%Mar 18, 2026
- Medium6.9dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_a…EPSS 0.2%Mar 17, 2026
- Low1.9A weakness has been identified in GPAC 26.03-DEV.Mar 12, 2026
- Medium6.0Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenti…EPSS 0.8%Mar 10, 2026
- Low2.1A vulnerability was detected in Bytedesk up to 1.3.9.Mar 9, 2026
- Low2.1A security vulnerability has been detected in Bytedesk up to 1.3.9.Mar 9, 2026
- Low2.1A weakness has been identified in Bytedesk up to 1.3.9.Mar 8, 2026
- Low2.1A security flaw has been discovered in Bytedesk up to 1.3.9.Mar 8, 2026
- High7.5A crafted JavaScript input executed with the QuickJS release 2025-09-13, fixed in commit fcd33c1afa7b3028531f53cd1190a3877454f6b3 (2025-12-11), interpreter using the o…EPSS 0.3%Mar 6, 2026
- Critical9.5Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover.EPSS 0.4%Mar 5, 2026