Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.9Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statdEPSS 0.3%Oct 16, 2026
- Medium6.5Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parseEPSS 0.2%Oct 16, 2026
- Medium5.9Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespaceEPSS 0.2%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combineEPSS 0.2%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in printEPSS 0.2%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getlineEPSS 0.2%Oct 16, 2026
- Medium5.3perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsingEPSS 0.2%Oct 16, 2026
- Medium5.5perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rowsEPSS 0.2%Oct 16, 2026
- High7.5perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selectorEPSS 0.2%Oct 16, 2026
- Low3.6A flaw was found in libarchive.EPSS 0.1%Oct 16, 2026
- High7.5com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property namesEPSS 0.9%Oct 16, 2026
- High7.7mariadb: mariadb: SQL injection via improper identifier quotingEPSS 0.3%Oct 16, 2026
- Medium5.5nfs-utils: nfs-utils: Denial of Service via assertion failure in fsiddEPSS 0.1%Oct 16, 2026
- High8.8mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statementOct 16, 2026
- Medium5.4mariadb: MariaDB: Unauthorized file access via CONNECT engine functionsEPSS 0.2%Oct 16, 2026
- High7.5axios: Axios affected by Denial of Service via __proto__ Key in mergeConfigEPSS 2.0%Oct 16, 2026
- High8.0@remix-run/router: react-router: React Router vulnerable to XSS via Open RedirectsEPSS 0.9%Oct 16, 2026
- High7.4crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumptionEPSS 0.9%Oct 16, 2026
- High7.5crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificateEPSS 0.5%Oct 16, 2026
- High7.5golang: net/url: Memory exhaustion in query parameter parsing in net/urlEPSS 2.3%Oct 16, 2026
- Medium6.5libtirpc: libtirpc: Denial of service via unbounded memory allocation during RPCSEC_GSS decodingEPSS 0.3%Oct 16, 2026
- Medium5.3A flaw was found in libtirpc.EPSS 0.2%Oct 16, 2026
- Low3.3libblockdev: libblockdev: argument injection in NTFS/VFAT label-setting helpers via udisks2 SetLabel() D-Bus methodEPSS 0.1%Oct 16, 2026
- Medium6.6A flaw was found in Nautilus.EPSS 0.1%Oct 16, 2026
- High7.3vim: Vim: Arbitrary code execution via 'helpfile' option processingEPSS 0.2%Oct 16, 2026
232 records · page 1 of 10
PreviousNext