Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.EPSS 0.1%Mar 11, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.EPSS 0.1%Mar 11, 2026
- Critical9.8Jellyfin is an open-source media system.EPSS 0.6%Mar 11, 2026
- Medium4.8Supabase Auth is a JWT based API for managing users and issuing JWT tokens.EPSS 0.2%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.EPSS 0.7%Mar 7, 2026
- High7.8Apple Multiple Buffer Overflow VulnerabilityKEVEPSS 1.4%Feb 11, 2026
- Medium5.5Apple Multiple Products Classic Buffer Overflow VulnerabilityKEVEPSS 0.4%Dec 12, 2025
- High7.8Apple Multiple Products Improper Locking VulnerabilityKEVEPSS 0.4%Dec 12, 2025
- High8.8Apple Multiple Products Use-After-Free WebKit VulnerabilityKEVEPSS 8.8%Dec 12, 2025
- High8.8Apple Multiple products Use-After-Free VulnerabilityKEVEPSS 4.0%Nov 5, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityKEVEPSS 4.7%Aug 20, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityKEVEPSS 32.5%Aug 20, 2025
- UnknownApple iOS/macOS/tvOS/watchOS 'libxpc' VulnerabilityKEVJul 30, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityKEVEPSS 1.6%Jul 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 ("iommu/vt-d:…EPSS 0.2%Jul 4, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityKEVEPSS 1.2%Jun 11, 2025
- Critical10.0The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component, which allows an unauthenticated attacker to send malicious payload rEPSS 83.0%May 13, 2025
- Medium5.3The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaEPSS 37.0%May 13, 2025
- Medium6.1The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attaEPSS 29.0%May 13, 2025
- Medium6.1he Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacEPSS 30.0%May 13, 2025
- Medium5.5A privacy issue was addressed by removing sensitive data.EPSS 22.0%May 12, 2025
- High7.8A permissions issue was addressed with additional restrictions.EPSS 21.0%May 12, 2025
- Medium5.5An information disclosure issue was addressed with improved privacy controls.EPSS 20.0%May 12, 2025
- High7.8An input validation issue was addressed by removing the vulnerable code.EPSS 25.0%May 12, 2025
- High8.0The issue was addressed with improved memory handling.EPSS 33.0%May 12, 2025