Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3ipv4: validate checksum_start before completing checksumOct 15, 2026
- Unknownipv4: free inet_opt and ireq_opt after an RCU grace periodOct 15, 2026
- High8.2FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy.EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memoryEPSS 0.3%Oct 14, 2026
- High7.1FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST.EPSS 0.3%Oct 14, 2026
- High7.1Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding.EPSS 0.3%Oct 14, 2026
- High8.7Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection RegexesEPSS 0.3%Oct 14, 2026
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateEPSS 0.3%Oct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.EPSS 0.2%Oct 14, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Medium6.0RabbitMQ is a messaging and streaming broker.EPSS 0.5%Oct 14, 2026
- Low3.6Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write exists in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string).EPSS 0.1%Oct 14, 2026
- Low2.5Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp).EPSS 0.1%Oct 14, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.Aug 14, 2026
- Medium6.1A flaw was found in GStreamer gst-plugins-good (avidemux).Aug 12, 2026
- Medium6.6A flaw was found in GStreamer gst-plugins-good (avidemux).Aug 12, 2026
- UnknownCVE-2026-39043Jun 16, 2026
- UnknownCVE-2026-39044Jun 16, 2026
- High7.6A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good.Jun 15, 2026
- High7.5An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function.Mar 23, 2026
- High8.8GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability.Mar 16, 2026
- High7.5A flaw was found in Blender 3.3.0.EPSS 1.7%Aug 16, 2022
23 records · page 1 of 1
PreviousNext