Recent Vulnerabilities

24h 7 days 30 days 90 days All
Sources: amazon_linux archlinux azure_linux bitnami_vulndb capec capec_enrichment_dashboard certeu certfr circl_kev cisa_known_exploited cna_scorecard cnvd csaf_abb csaf_adstecindustrialitgmbh csaf_amd csaf_aumariestergmbhcokg csaf_baadem2mproductsgmbh csaf_beckhoffautomationgmbhcokg csaf_bendergmbhcokg csaf_bosch csaf_bsi csaf_bsi_aggregator csaf_bsi_cvd_white csaf_bsi_white csaf_bsi_wid_white csaf_carlogavazziautomation csaf_certbund csaf_certvde csaf_cisa csaf_cisa_it csaf_cisa_ot csaf_cisco csaf_claaskgaa csaf_codesysgmbh csaf_dell csaf_duraggmbh csaf_endresshauserag csaf_ericsson csaf_euchnergmbhcokg csaf_festosecokg csaf_frauschersensortechnikgmbh csaf_hancom csaf_harmaninternational csaf_helmholzgmbhcokg csaf_himapaulhildebrandtgmbh csaf_hitachi csaf_hpe csaf_huawei csaf_hydacinternationalgmbh csaf_ibm csaf_ifmelectronicgmbh csaf_janitzaelectronicsgmbh csaf_jumogmbhcokg csaf_juniper csaf_kebautomationkg csaf_kukaag csaf_lenovo csaf_lenzese csaf_mbconnectlinegmbh csaf_mettlertoledogmbh csaf_metzconnectgmbh csaf_microsoft csaf_mieleciekg csaf_moxa csaf_murrelektronikgmbh csaf_ncscnl csaf_ndaal csaf_netapp csaf_nozomi csaf_nozominetworks csaf_nvidia csaf_opcfoundation csaf_openeuler csaf_opensuse csaf_oracle csaf_ox csaf_paloalto csaf_panasonic csaf_pentagrid csaf_pepperlfuchsse csaf_phoenix csaf_pilzgmbhcokg csaf_qnap csaf_redhat csaf_samsung csaf_sauterag csaf_schneider csaf_sick csaf_siemens csaf_smasolartechnologyag csaf_suse csaf_swarcotrafficsystemsgmbh csaf_synology csaf_tibco csaf_trend csaf_trumpfsecokg csaf_trustsource csaf_tuxcare csaf_ubiquiti csaf_vartastoragegmbh csaf_vegagrieshaberkg csaf_vmware csaf_wagogmbhcokg csaf_weidmuellerinterfacegmbhcokg csaf_welotecgmbh csaf_wiesemanntheisgmbh csaf_yaskawaeuropegmbh csaf_yokogawa csaf_zyxel cve_forecast cve_icu cve_vs_github_dashboard cvelistv5 cwe_dashboard cwe_enrichment cwec debian_security_tracker drupal emb3d emb3d_dashboard epss_dashboard epss_history epss_kev_enrichment euvd_kev fedora fkie_nvd freebsd gcve gcve_enriched gcve_enrichment gcve_enrichment_dashboard gentoo github gsd jvn kev_ransomware mitre_attack moksha ndaal_kev netbsd nuclei_dashboard nuclei_enrichment nvd nvd_cpe_dictionary openbsd opencve oracle_linux ossf_malicious_packages osv_almalinux osv_alpine osv_bellsoft osv_chainguard osv_cran osv_github_actions osv_golang osv_haskell osv_hex osv_maven osv_npm osv_nuget osv_ocaml osv_ossfuzz osv_packagist osv_pub osv_rocky osv_rubygems osv_rustsec osv_swift osv_ubuntu osv_wolfi publish_stats pysec sadp_pilot ssvc ssvc_dashboard tailscale tsunami_enrichment variot vulnrichment Clear
ID Title Severity CVSS Source Updated
ghsa-r3rc-9hpw-54v9 SwiftNIO: Out-of-bounds write via ByteBuffer index and length UInt32 overflow UNKNOWN 8.3 ghsa unknown
ghsa-cq87-8r7h-962v SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator UNKNOWN 6.3 ghsa unknown
ghsa-6ph5-fww6-vfwv NIOExtras: NIOHTTPRequestDecompressor ratio limit bypass via inflated Content-Length UNKNOWN 6.9 ghsa unknown
ghsa-rj37-6j9x-74q6 SwiftNIO NIOHTTP1: HTTPDecoder accepts unbounded HTTP/1 header blocks, enabling remote DoS UNKNOWN 8.7 ghsa unknown
ghsa-g3hp-f6mg-559v Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection UNKNOWN 4.2 ghsa unknown
ghsa-fmq6-4w57-2w3v wasm3 uncontrolled memory allocation vulnerability UNKNOWN 6.9 ghsa unknown
ghsa-wc9m-r3v6-9p5h Sparkle Signing Checks Bypass UNKNOWN 7.3 ghsa unknown
ghsa-r6r4-5pr8-gjcp Vapor contains an integer overflow in URI leading to potential host spoofing UNKNOWN 6.5 ghsa unknown
ghsa-qppj-fm5r-hxr3 HTTP/2 Stream Cancellation Attack UNKNOWN 6.9 ghsa unknown
ghsa-3mwq-h3g6-ffhm Vapor's incorrect request error handling triggers server crash UNKNOWN 5.3 ghsa unknown
ghsa-q36x-r5x4-h4q6 Denial of service via HTTP/2 HEADERS frames padding UNKNOWN 7.5 ghsa unknown
ghsa-x768-cvr2-345r Un-sanitized metric name or labels can be used to take over exported metrics UNKNOWN 5.9 ghsa unknown
ghsa-4px2-pw77-vc85 SwiftNIO HTTP/2: HTTP/2-to-HTTP/1 Request Smuggling via unvalidated :path pseudo-header in HTTP2ToHTTP1Codec UNKNOWN 5.3 ghsa unknown
ghsa-q3g2-m552-3r9c swift-nio-http2: Missing CR/LF/NUL validation in header values UNKNOWN 6.3 ghsa unknown
ghsa-q3g2-m552-3r9c swift-nio-http2: Missing CR/LF/NUL validation in header values UNKNOWN 6.3 ghsa unknown
ghsa-hg88-v3cw-3qrh Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta UNKNOWN 6.1 ghsa unknown
ghsa-whx6-m9j4-w2m2 yyjson has a Double Free vulnerability UNKNOWN 8.8 ghsa unknown
ghsa-rxmj-hg9v-vp3p Uncontrolled Resource Consumption in LengthPrefixedMessageReader UNKNOWN 7.5 ghsa unknown
ghsa-gcj9-jj38-hwmc Vapor's Metrics integration could cause a system drain UNKNOWN 5.3 ghsa unknown
ghsa-w3f6-pc54-gfw7 swift-nio-http2 vulnerable to denial of service via mishandled HPACK variable length integer encoding UNKNOWN 7.5 ghsa unknown
ghsa-pqwh-c2f3-vxmq Untrusted data fed into `Data.init(base32Encoded:)` can result in exposing server memory and/or crash UNKNOWN ghsa unknown
ghsa-ccw9-q5h2-8c2w swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length UNKNOWN 7.5 ghsa unknown
ghsa-q36x-r5x4-h4q6 Denial of service via HTTP/2 HEADERS frames padding UNKNOWN 7.5 ghsa unknown
ghsa-239c-6cv2-wwx8 Swift-corelibs-foundation denial of service in JSON decoding with JSONDecoder UNKNOWN 7.5 ghsa unknown
ghsa-v3r5-pjpm-mwgq Async HTTP Client has CRLF Injection vulnerability in HTTP request headers UNKNOWN 7.5 ghsa unknown
ghsa-7fj7-39wj-c64f SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') UNKNOWN 5.3 ghsa unknown
ghsa-pgfx-g6rc-8cjv swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames UNKNOWN 7.5 ghsa unknown
ghsa-2jx2-qcm4-rf9h Incomplete Internal State Distinction in GRPCWebToHTTP2ServerCodec UNKNOWN ghsa unknown
ghsa-4rhq-vq24-88gw Uncontrolled Recursion in HTTP2ToRawGRPCServerCodec UNKNOWN ghsa unknown
ghsa-773g-x274-8qmf SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression UNKNOWN 7.5 ghsa unknown