DI
Product
Discovery
9
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 1Low 0
Watch
Add Discovery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42055 | 8.1 | Jun 17 | NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability Affected: All versions, or not specified |
| CVE-2026-9256 | 8.1 | May 22 | NGINX ngx_http_rewrite_module vulnerability Affected: All versions, or not specified |
| CVE-2020-1712 | 7.8 | Mar 31 | A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages Affected: All versions, or not specified |
| CVE-2026-44495 | 7.7 | Jun 11 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge Affected: All versions, or not specified |
| CVE-2025-13601 | 7.7 | Nov 26 | Glib: integer overflow in in g_escape_uri_string() Affected: 2.0 |
| CVE-2025-71319 | 7.5 | Jun 9 | image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser Affected: 2.0 |
| CVE-2024-12088 | 7.5 | Jan 14 | Rsync: --safe-links option bypass leads to path traversal Affected: 1.14 |
| CVE-2023-52356 | 7.5 | Jan 25 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt() API Affected: 2.0 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: All versions, or not specified |
Showing 9