Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.EPSS 0.9%Mar 27, 2026
- High7.5A flaw was found in p11-kit.EPSS 1.3%Mar 26, 2026
- High7.5Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processingEPSS 1.1%Mar 19, 2026
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveEPSS 0.7%Mar 13, 2026
- Medium6.9Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.Mar 12, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.EPSS 1.3%Jan 7, 2026
- Medium6.5A flaw was found in glib.EPSS 0.6%Dec 11, 2025
- Critical9.8A flaw was found in GLib (Gnome Lib).EPSS 0.8%Dec 10, 2025
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.EPSS 2.3%Sep 2, 2025
- High8.8Apple Multiple Products Buffer Overflow VulnerabilityKEVEPSS 1.6%Jul 29, 2025
- Low2.5A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.EPSS 0.3%Jun 16, 2025
- High8.1A flaw was found in Wildfly Elytron integration.EPSS 0.9%Mar 4, 2025
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Jul 1, 2024
- Medium6.7A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file.Jun 12, 2024
- High7.5A flaw was found in m2crypto.Feb 5, 2024
- High7.8Linux Kernel Use-After-Free VulnerabilityKEVEPSS 28.1%Jan 31, 2024
- Medium5.5A heap use-after-free issue has been identified in SQLite in the jsonParseAddNodeArray() function in sqlite3.c.Jan 16, 2024
- High7.5A vulnerability was found in GnuTLS.Jan 16, 2024
- High7.0OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_a…Dec 24, 2023
- Medium5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such tha…Dec 18, 2023
- High7.1An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel.EPSS 0.5%Dec 8, 2023
- Medium5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.EPSS 1.3%Nov 28, 2023
- Medium4.3An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel.EPSS 1.6%Nov 16, 2023