Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3RabbitMQ is a messaging and streaming broker.Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.Oct 14, 2026
- High8.0util-linux is a random collection of Linux utilities.Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.Oct 14, 2026
- UnknownA remote code execution vulnerability exists within the Field UI module in Drupal core.Oct 14, 2026
- Medium6.4A flaw was found in the DPDK vhost library.Oct 14, 2026
- High7.2The fix for CVE-2026-12996 was incomplete.Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.Oct 14, 2026
- Medium5.9Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_…Oct 14, 2026
- High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…Oct 14, 2026
- High7.5An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service.Oct 14, 2026
- UnknownException tags can cause host data structures to be unalignedOct 14, 2026
- Medium6.2Component-model handle tables are capped only per instance and charged to no limitOct 14, 2026
- UnknownPanic when pending calls are run after a trapOct 14, 2026
- UnknownOverlapping string transcode in a fused adapter can panicOct 14, 2026
- Medium5.3Panic on erroneous call-to-host from guest realloc callOct 14, 2026
- UnknownPanic viewing component model stream or future as the wrong typeOct 14, 2026
- UnknownHost panic when component is cancelled under some conditionsOct 14, 2026
- UnknownPanic when invoking an async-lifted function viaOct 14, 2026
- Low3.7Unauthenticated ServerHello can downgrade later connections to classical key exchangeOct 14, 2026
- Low3.7Brotli certificate decompression can allocate up to 1 GiB before authenticationOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOct 14, 2026
- Medium4.0impls for client session values expose TLS secretsOct 14, 2026
- Low3.3A flaw was found in BusyBox dpkg.Oct 14, 2026
- High8.4A flaw was found in gst-plugins-base.EPSS 0.2%Oct 14, 2026