Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownPoly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or moreOct 9, 2026
- UnknownMIKEY message MAC is never verified on receive, so forged messages are acceptedOct 9, 2026
- UnknownPre-shared key mode transmits the TGK in cleartext, exposing the SRTP master keyOct 9, 2026
- UnknownOutgoing datagram buffer accounting can panic the sender in quinn-protoSep 14, 2026
- UnknownPeer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabledSep 14, 2026
- UnknownRemote peer can panic quinn-proto with zero-length STREAM frames during unordered readsSep 14, 2026
- UnknownZero-length DATAGRAM frames bypass the receive buffer limit in quinn-protoAug 17, 2026
- UnknownStream reassembly memory-exhaustion guard in quinn-proto can be bypassedAug 17, 2026
- UnknownUnbounded growth of pending connection ID retirements in quinn-protoAug 17, 2026
- UnknownBIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addressesAug 14, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- Unknownunsafe-libyaml is unmaintainedMar 25, 2024
- UnknownXSS in ammonia via SVG , , and/or tagsOct 10, 2021
- UnknownIncorrect escaping for functions in CSS style attributesOct 10, 2021
39 records · page 2 of 2
PreviousNext