https://radar.offseq.com/threat/httpbody-versions-before-12301-for-perl-allow-cpu-exhaustion-via-quadratic-rescanning-of-a-cve-2026-4199dce1971bc4e3 2026-10-28T19:29:59.912Z weekly 0.8 https://radar.offseq.com/threat/httpbody-versions-before-12301-for-perl-drop-mixed-case-percent-escapes-from-urlencoded-form-cve-2026-5b8cb5206b2c0023 2026-10-28T19:29:56.991Z weekly 0.7 https://radar.offseq.com/threat/httpbody-versions-before-12301-for-perl-lose-track-of-chunk-boundaries-in-chunked-request-bodies-cve-3735e1c6103254d8 2026-10-28T19:29:53.784Z weekly 0.7 https://radar.offseq.com/threat/httpbody-versions-before-12401-for-perl-allow-memory-exhaustion-via-unbounded-buffering-of-cve-2026-c9cec32c6766c4f3 2026-10-28T19:29:50.515Z weekly 0.8 https://radar.offseq.com/threat/mimefieldparamval-versions-before-5521-for-perl-do-not-flag-a-duplicate-boundary-parameter-cve-2026-04b86ced7c8e03ec 2026-10-28T19:29:47.870Z weekly 0.7 https://radar.offseq.com/threat/mimewords-versions-before-5521-for-perl-allow-memory-exhaustion-via-repeated-sequences-in-cve-2026-0a3a65e34b050d68 2026-10-28T19:29:44.240Z weekly 0.8 https://radar.offseq.com/threat/httpbody-versions-before-12301-for-perl-allow-cpu-exhaustion-via-quadratic-regex-backtracking-cve-2026-ea37ae73ef02231f 2026-10-28T19:29:40.934Z weekly 0.8 https://radar.offseq.com/threat/httpbody-versions-before-12401-for-perl-allow-cpu-exhaustion-via-regex-backtracking-on-the-cve-2026-032b3334369721d9 2026-10-28T19:29:37.322Z weekly 0.8 https://radar.offseq.com/threat/mimeparserfileunder-versions-before-5521-for-perl-reuse-a-pre-created-output-directory-and-follow-0367d6c059d51790 2026-10-28T19:29:33.927Z weekly 0.8 https://radar.offseq.com/threat/mimeparser-versions-before-5521-for-perl-set-no-limit-on-the-number-of-message-parts-by-default-cve-0bbc857a2f6a75ed 2026-10-28T19:29:30.661Z weekly 0.7 https://radar.offseq.com/threat/when-eap-runs-with-secmgr-the-openjdk-orbs-jdkbridge-honours-attacker-supplied-cdr-codebase-urls-36a8740aa617ecfe 2026-10-28T19:28:55.608Z weekly 0.8 https://radar.offseq.com/threat/dont-starve-together-steam-appid-322330-through-build-747465-contains-a-memory-corruption-8d7ee0f0e5d30ca7 2026-10-28T19:29:27.196Z weekly 0.7 https://radar.offseq.com/threat/a-user-with-read-access-to-grafanas-server-logs-or-to-a-log-store-they-are-shipped-to-can-recover-the-a72cce422e7625d1 2026-10-28T19:29:23.696Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-115415-cwe-1427-improper-neutralization-of-input-used-for-llm-prompting-in-amazon-strands-f79de6bb16a5e324 2026-10-28T19:43:46.375Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118651-cwe-346-origin-validation-error-in-labstack-echo-458a10e78a1689c6 2026-10-28T19:43:41.673Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118650-cwe-177-improper-handling-of-url-encoding-hex-encoding-in-labstack-echo-f71d83b6ef20e803 2026-10-28T19:43:16.875Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-63190-cwe-306-missing-authentication-for-critical-function-in-fearlessgeekmedia-fearlesscms-09d345d566d5dfa9 2026-10-28T19:43:13.154Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-61542-cwe-306-missing-authentication-for-critical-function-in-drhelius-gearboy-a045c1dc8eb4fe53 2026-10-28T19:59:17.028Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118653-cwe-290-authentication-bypass-by-spoofing-in-labstack-echo-e69da52e641e3bd7 2026-10-28T20:00:32.377Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-54162-cwe-150-improper-neutralization-of-escape-meta-or-control-sequences-in-alexandre-c0426a771820dd95 2026-10-28T20:00:28.012Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-61529-cwe-918-server-side-request-forgery-ssrf-in-endatix-fdd45c66e075a621 2026-10-28T20:00:22.689Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118652-cwe-79-cross-site-scripting-in-labstack-echo-b5a9eeeaa5d7a8d3 2026-10-28T20:00:17.834Z weekly 0.7 https://radar.offseq.com/threat/ikev2-use-after-free-bug-when-using-ike-over-tcp-7c9fe8eb142c671f 2026-10-28T20:00:13.556Z weekly 0.7 https://radar.offseq.com/threat/null-pointer-dereference-in-pkcs7-bundle-with-no-certificates-232d595bd1001506 2026-10-28T20:00:08.802Z weekly 0.7 https://radar.offseq.com/threat/vitess-vttablet-twopcz-reflected-xss-856ccc7c2168ad4a 2026-10-28T20:00:04.375Z weekly 0.7 https://radar.offseq.com/threat/tls-12-session-resumption-in-ssl-crosses-sni-virtual-host-client-certificate-trust-boundaries-e459cc77c317bea3 2026-10-28T19:59:59.813Z weekly 0.7 https://radar.offseq.com/threat/tls-13-client-ticket-store-crashed-by-newsessionticket-with-empty-earlydata-extension-in-ssl-2bfef381d5381f8d 2026-10-28T19:59:55.672Z weekly 0.7 https://radar.offseq.com/threat/cifs-utils-mountcifs-credential-file-option-injection-allows-local-privilege-boundary-bypass-b43547d2b8a9c5b2 2026-10-28T19:59:52.375Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-117574-authorization-bypass-through-user-controlled-key-in-red-hat-red-hat-openshift-ai-rhoai-8cd1286cd4e43076 2026-10-28T20:14:53.993Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-118654-cwe-22-path-traversal-in-labstack-echo-c5fae4ae9b6bbf71 2026-10-28T20:15:22.215Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118655-cwe-174-double-decoding-of-the-same-data-in-labstack-echo-8838edf7ded180b5 2026-10-28T20:15:16.581Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-76418-unchecked-return-value-to-null-pointer-dereference-in-cisco-cisco-secure-firewall-e91e1a1647fdbba8 2026-10-29T03:57:11.195Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-55587-cwe-346-origin-validation-error-in-aliasvault-b0a8f547fb6d40e1 2026-10-28T20:14:41.070Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-13451-server-side-request-forgery-ssrf-in-red-hat-red-hat-openshift-ai-rhoai-19614c3f54d2a7d6 2026-10-28T20:14:35.835Z weekly 0.8 https://radar.offseq.com/threat/echo-bodydump-captures-request-and-response-bodies-without-size-limits-in-v4-cve-2026-118260-1803d53c020bf505 2026-10-28T20:14:28.296Z weekly 0.8 https://radar.offseq.com/threat/echo-decompress-permits-unbounded-gzip-expansion-in-v4-cve-2026-118261-e2f8dcd9d2372e68 2026-10-28T20:14:23.009Z weekly 0.8 https://radar.offseq.com/threat/echo-websocket-proxy-can-retain-connections-and-handlers-after-client-disconnect-cve-2026-118262-d5ebb5d5ad83a754 2026-10-28T20:14:18.280Z weekly 0.8 https://radar.offseq.com/threat/echo-bodydump-can-discard-bodylimit-overflow-errors-for-unknown-length-requests-cve-2026-118263-61bc0ee75fe11df7 2026-10-28T20:15:11.988Z weekly 0.7 https://radar.offseq.com/threat/echo-x-real-ip-extractor-trusts-the-header-value-instead-of-the-sending-peer-cve-2026-118265-d43acf2f843fdd4a 2026-10-28T20:15:05.138Z weekly 0.7 https://radar.offseq.com/threat/echo-rejected-websocket-upgrades-can-bypass-echo-route-level-access-controls-cve-2026-118264-4f12241be37a8e3a 2026-10-28T20:14:13.337Z weekly 0.9 https://radar.offseq.com/threat/v2-caddy-has-an-rfc-7230-61-compliance-issue-hop-by-hop-headers-that-leak-through-cve-2026-55458-38b7dc5d8a2a2160 2026-10-28T20:14:59.610Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118656-cwe-601-open-redirect-in-labstack-echo-31d93ea41afc96e5 2026-10-28T20:30:26.218Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118657-cwe-346-origin-validation-error-in-labstack-echo-b92542776a11d39d 2026-10-28T20:30:22.226Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118658-cwe-601-open-redirect-in-labstack-echo-7febe1d2d5177bf4 2026-10-28T20:30:17.219Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118661-cwe-565-reliance-on-cookies-without-validation-and-integrity-checking-in-capricorn86-d5547fd154c5a881 2026-10-28T20:44:33.957Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118659-cwe-918-server-side-request-forgery-ssrf-in-capricorn86-happy-dom-82a36290b5191bf4 2026-10-28T20:43:39.463Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118660-cwe-918-server-side-request-forgery-ssrf-in-capricorn86-happy-dom-3f9c60ed64f7987c 2026-10-28T20:43:35.063Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118667-cwe-22-path-traversal-in-langchain-ai-langgraph-2416abefc2513c6e 2026-10-28T21:00:15.119Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118665-cwe-613-insufficient-session-expiration-in-ardatan-graphql-tools-1ed85b02ea89e405 2026-10-28T20:59:19.269Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118666-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-ardatan-graphql-3e5eb8db875755ba 2026-10-28T21:00:10.440Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118662-cwe-180-incorrect-behavior-order-validate-before-canonicalize-in-vitejs-vite-7cf58801d14b8faa 2026-10-28T21:00:06.892Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118663-cwe-174-double-decoding-of-the-same-data-in-honojs-node-server-b74c4ccfd75b6ac2 2026-10-28T21:00:03.205Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118664-cwe-400-uncontrolled-resource-consumption-in-samverschueren-decode-uri-component-32daeb5d0232e083 2026-10-28T20:59:15.057Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118668-cwe-639-authorization-bypass-through-user-controlled-key-in-langchain-ai-langgraph-api-b1a76c608cfa9eee 2026-10-28T21:06:43.157Z weekly 0.8 https://radar.offseq.com/threat/mysqlconnector-account-password-disclosed-to-a-man-in-the-middle-in-zero-configuration-tls-mode-clear-110a248e1d9fd005 2026-10-28T19:49:44.000Z weekly 0.7 https://radar.offseq.com/threat/rucio-has-an-authorization-bypass-on-rest-api-endpoint-for-signing-urls-cve-2026-58273-09bd098568ade56a 2026-10-28T19:50:05.000Z weekly 0.8 https://radar.offseq.com/threat/mcp-sanitizer-file-path-sanitizer-permits-arbitrary-user-home-absolute-paths-1f04c3c7e2ee970c 2026-10-28T19:51:34.000Z weekly 0.8 https://radar.offseq.com/threat/mcp-sanitizer-url-sanitizer-allows-localhostipv6-loopback-ssrf-bypass-via-explicit-port-or-bracketed-c7db142160cb0742 2026-10-28T19:51:40.000Z weekly 0.8 https://radar.offseq.com/threat/echo-reverse-proxy-forwards-attacker-supplied-x-real-ip-to-upstream-by-default-cve-2026-118651-6cdf5f0b19526173 2026-10-28T19:53:24.000Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-has-csrf-protection-bypass-via-methodoverride-rewriting-post-to-safe-method-cve-2026-118266-32cd2c193e0252bf 2026-10-28T19:53:36.000Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-has-rate-limiter-bypass-via-spoofed-x-forwarded-for-header-in-default-configuration-cve-2026-f41c54201f42dcd6 2026-10-28T19:53:47.000Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-vulnerable-to-reflected-cross-site-scripting-xss-via-unsanitized-jsonp-callback-in-contextjsonp-7617338e77b0d463 2026-10-28T19:54:05.000Z weekly 0.7 https://radar.offseq.com/threat/echos-middlewarestatic-2f-encoded-path-bypasses-routegroup-middleware-guarding-a-statically-served-path-eac4264d1a86a284 2026-10-28T19:54:20.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-core-javascript-url-in-an-xlinkhref-attribute-survives-text-filtering-and-reaches-exported-3d5dca65200e0472 2026-10-28T19:55:10.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-core-html-text-parsing-falls-back-to-unfiltered-innerhtml-during-printing-cve-2026-118244-a4a659f0811779a7 2026-10-28T19:55:23.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dashboards-proto-data-table-id-writes-sync-listeners-to-objectprototype-cve-2026-118243-033c705ad7c2d940 2026-10-28T19:55:32.000Z weekly 0.7 https://radar.offseq.com/threat/highcharts-dashboards-grid-pro-datatablesetcell-and-column-writers-treat-proto-as-an-cve-2026-118247-dde6a242cedab43f 2026-10-28T19:55:37.000Z weekly 0.7 https://radar.offseq.com/threat/highcharts-dashboards-chartconstructor-is-an-unchecked-lookup-into-the-highcharts-namespace-cve-2026-b3b94e68a5ff5521 2026-10-28T19:55:41.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-grid-custom-icon-definition-objects-written-with-raw-setattribute-on-path-cve-2026-118242-5cfb9192c808c603 2026-10-28T19:55:46.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-grid-pro-cell-renderer-attributes-map-written-with-raw-setattribute-cve-2026-116797-a957edf529650c2d 2026-10-28T19:56:03.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-core-breadcrumbsstyle-keys-become-svg-event-handler-attributes-cve-2026-118246-50c9aec95dbff5bf 2026-10-28T19:56:07.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-series-column-construction-writes-to-objectprototype-cve-2026-118249-b71d74550589237d 2026-10-28T19:56:13.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dotted-serieskeys-paths-write-to-objectprototype-cve-2026-118250-81b2869a06c8cf78 2026-10-28T19:56:18.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-javascript-url-in-creditshref-runs-script-on-click-cve-2026-118251-8cc21b5190931e4f 2026-10-28T19:56:36.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dashboards-parses-sidebar-component-labels-as-html-cve-2026-118252-20fba20ceb5fdcf1 2026-10-28T19:56:57.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-dashboards-parses-fullscreen-labels-as-html-cve-2026-118253-5f1ca418bd11c1de 2026-10-28T19:57:20.000Z weekly 0.8 https://radar.offseq.com/threat/grid-lite-highcharts-grid-parses-pagination-language-options-as-html-cve-2026-118254-9e8c8124962a67b8 2026-10-28T19:57:34.000Z weekly 0.8 https://radar.offseq.com/threat/highcharts-grid-javascript-url-in-creditshref-runs-script-on-click-cve-2026-118255-0cc4fdaf7210eb0b 2026-10-28T19:57:48.000Z weekly 0.8 https://radar.offseq.com/threat/malicious-code-in-itsa-utils-npm-06c5949afc477309 2026-10-28T21:16:55.345Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118804-missing-authorization-in-bricks-bricks-builder-82c7a71ea0160b41 2026-10-28T21:29:36.227Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118669-cwe-863-incorrect-authorization-in-oauthlib-e992e47d2a14b549 2026-10-28T21:29:32.320Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118682-improper-certificate-validation-in-karingx-clashmi-0cf41be86b7a26a7 2026-10-28T21:29:27.917Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118689-allocation-of-resources-without-limits-or-throttling-in-ovenmedialabs-ovenmediaengine-d7227961e590e89d 2026-10-28T21:29:00.906Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118690-missing-authentication-for-critical-function-in-signalk-signalk-server-738ce5971bdaf562 2026-10-28T21:28:57.322Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-118691-initialization-of-a-resource-with-an-insecure-default-in-gudong2003-xianyu-auto-reply-211f1805ed4f6ad5 2026-10-28T21:29:23.215Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118692-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-1db1599ff3f6e4b9 2026-10-28T21:28:53.582Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118693-absolute-path-traversal-in-giuspen-cherrytree-195468ac269d28ae 2026-10-28T21:29:19.855Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118694-inefficient-algorithmic-complexity-in-trentm-python-markdown2-9eb35417d5c7b6a6 2026-10-28T21:28:49.711Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118752-out-of-bounds-write-in-danoli3-freeimage-8f80334419cc396a 2026-10-28T21:28:46.513Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118753-out-of-bounds-write-in-danoli3-freeimage-5378e97bc62f9189 2026-10-28T21:28:43.046Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118754-missing-authorization-in-dolibarr-dolibarr-erpcrm-53ce25a111d70c7d 2026-10-28T21:29:14.116Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118755-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-e31170e6a9f34d94 2026-10-28T21:28:39.559Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118756-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-gopasspw-6af745a20bbc7018 2026-10-28T21:29:08.750Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118757-missing-authorization-in-pi-websolution-piweb-disable-payment-method-partial-payment-15a6344bd00c4f26 2026-10-28T21:29:04.857Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118803-improper-neutralization-of-special-elements-used-in-a-template-engine-in-bricks-bricks-bebe5a18a6d191d2 2026-10-28T21:28:36.013Z weekly 0.8 https://radar.offseq.com/threat/managed-for-malice-how-attackers-turn-mdm-into-remote-access-5b1580c41d0164f3 2026-10-28T21:59:25.588Z weekly 0.7 https://radar.offseq.com/threat/false-protection-emptied-accounts-the-seven-android-trojan-families-targeting-indian-banking-apps-ffb0eea070bf7b53 2026-10-28T21:59:21.543Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-116641-cwe-295-improper-certificate-validation-in-mongodb-database-tools-bbf526e0035199d2 2026-10-28T21:59:02.612Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-54453-cwe-74-injection-in-opencats-opencats-55c5347edae9b390 2026-10-28T21:58:46.653Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-61571-cwe-306-missing-authentication-for-critical-function-in-wwbn-avideo-encoder-43167897f374cb01 2026-10-28T21:58:42.493Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118537-improper-input-validation-in-a2ui-ffdf4bda89a04cd7 2026-10-28T21:58:58.751Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-54455-cwe-20-improper-input-validation-in-opencats-opencats-b3b817e8e06519fd 2026-10-28T21:58:38.474Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-61564-cwe-94-code-injection-in-wwbn-avideo-encoder-a58d1755eccf759b 2026-10-28T21:58:34.342Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-61567-cwe-78-os-command-injection-in-wwbn-avideo-encoder-ceb4468e77086efa 2026-10-28T21:58:29.949Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-61572-cwe-918-server-side-request-forgery-ssrf-in-wwbn-avideo-encoder-cac5634e75143295 2026-10-28T21:58:25.283Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-61573-cwe-79-cross-site-scripting-in-wwbn-avideo-encoder-19a5fb38b3e7ac6a 2026-10-28T21:58:54.999Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-57448-cwe-918-server-side-request-forgery-ssrf-in-mrblomblo-blombooru-a8a4ded90968979c 2026-10-28T21:58:50.460Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-61546-cwe-346-origin-validation-error-in-ankimcp-anki-mcp-server-addon-5ea3f0850d047308 2026-10-28T21:58:20.393Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-93851-cwe-22-path-traversal-in-mattermost-27710a7fa379d829 2026-10-28T21:58:16.383Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-61569-cwe-89-sql-injection-in-wwbn-avideo-encoder-fd8dd62fb0d7d343 2026-10-29T04:13:29.854Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-61575-cwe-79-cross-site-scripting-in-wwbn-avideo-encoder-f2b4ebf3f491f2a3 2026-10-29T04:27:21.315Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-zaip-aicli-npm-48bfe6d7a84435a7 2026-10-29T04:27:17.645Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-has-arbitrary-scheme-injection-in-wwwredirectnonwwwredirect-middlewares-via-x-forwarded-proto-03a3119a1691800f 2026-10-29T04:27:14.412Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-has-open-redirect-via-control-character-prefix-defeating-sanitizeuri-cve-2026-118656-11c704e78bf7d428 2026-10-29T04:27:10.020Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-has-a-static-middleware-double-unescape-path-traversal-cve-2026-118655-bafae3aecf023339 2026-10-29T04:27:06.255Z weekly 0.7 https://radar.offseq.com/threat/v5-echo-static-file-middleware-route-protection-bypass-via-encoded-dot-dot-traversal-cve-2026-118654-cd48790ae054107a 2026-10-29T04:15:11.024Z weekly 0.7 https://radar.offseq.com/threat/echo-https-redirect-and-hsts-bypass-via-unconditional-trust-of-forwarded-scheme-headers-cve-2026-118657-966639021ac2890b 2026-10-29T04:15:06.328Z weekly 0.7 https://radar.offseq.com/threat/hononode-server-servestatic-decodes-the-request-path-a-second-time-leading-to-bypass-of-middleware-on-a0b0b410c0410de3 2026-10-29T04:14:56.986Z weekly 0.7 https://radar.offseq.com/threat/graphql-tools-shared-legacy-executor-routes-one-subscriptions-results-to-a-different-caller-cve-2026-c86be437ca93c226 2026-10-29T04:14:52.784Z weekly 0.7 https://radar.offseq.com/threat/graphql-tools-per-request-connection-parameters-persist-into-later-users-websocket-authentications-cve-9407362799762447 2026-10-29T04:12:09.570Z weekly 0.8 https://radar.offseq.com/threat/langgraph-unencoded-identifiers-in-langgraph-sdk-v3-streaming-can-redirect-authenticated-get-requests-1bfd13060ff126ce 2026-10-29T04:14:48.943Z weekly 0.7 https://radar.offseq.com/threat/happy-dom-has-cookie-scope-forgery-no-dns-label-boundary-on-domain-matching-attacker-origin-sets-d82d80758cdb0d7d 2026-10-29T04:14:44.136Z weekly 0.7 https://radar.offseq.com/threat/vue-i18n-escapeparameter-does-not-prevent-xss-through-srcdoc-in-translation-messages-cve-2026-118257-831c2e60bc3e563c 2026-10-29T04:12:05.347Z weekly 0.8 https://radar.offseq.com/threat/vue-i18n-escapeparameter-does-not-escape-named-values-when-the-same-call-also-passes-a-list-cve-2026-af5a531453cf237f 2026-10-29T04:14:40.550Z weekly 0.7 https://radar.offseq.com/threat/happy-dom-ssrf-via-iframe-and-link-stylesheet-when-parsing-untrusted-html-cve-2026-118660-15c62b16c5ca553d 2026-10-29T04:12:00.604Z weekly 0.8 https://radar.offseq.com/threat/nodejs-whisper-allows-os-command-injection-through-crafted-audio-file-paths-cve-2026-110644-48836413e3038093 2026-10-29T04:11:56.453Z weekly 0.9 https://radar.offseq.com/threat/opentelemetry-java-quadratic-cpu-consumption-in-w3c-tracestate-parsing-cve-2026-118259-add3212d11c3af2c 2026-10-29T04:14:35.434Z weekly 0.7 https://radar.offseq.com/threat/langgraph-api-relative-webhook-targets-in-langgraph-server-can-reach-in-process-routes-without-d459f54a8a50f0af 2026-10-29T04:14:31.878Z weekly 0.7 https://radar.offseq.com/threat/i18next-http-backend-namespace-value-starting-with-forms-a-protocol-relative-url-when-loadpathaddpath-ec0e672f5a0f5135 2026-10-29T04:14:28.438Z weekly 0.7 https://radar.offseq.com/threat/filelock-softfilelock-stale-lock-break-removes-a-live-lock-file-on-a-reused-inode-number-and-admits-e286a07bdec5de1f 2026-10-29T04:14:23.885Z weekly 0.7 https://radar.offseq.com/threat/langgraph-api-incomplete-assistant-authorization-in-langgraph-server-run-creation-cve-2026-55236-01c38b80f5cf0d54 2026-10-29T04:14:19.615Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-holder-refresh-writes-through-a-hard-link-and-hangs-on-a-named-pipe-that-af9aba769acad39a 2026-10-29T04:14:15.468Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-follows-a-symbolic-link-swapped-in-at-pathfilelock-and-creates-claim-files-7aa5a73121607304 2026-10-29T04:14:09.628Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-follows-a-symlink-at-the-lock-path-into-sqlite-cve-2026-112936-cb3553197c3dd17a 2026-10-29T04:14:05.683Z weekly 0.7 https://radar.offseq.com/threat/filelock-unixfilelock-truncates-and-chmods-any-regular-file-another-user-renames-or-hard-links-onto-c80c26086806a213 2026-10-29T04:14:01.554Z weekly 0.7 https://radar.offseq.com/threat/filelock-symlink-swap-during-softfilelocks-writability-check-leaks-whether-a-path-exists-and-is-8a935c03d3056422 2026-10-29T04:13:57.370Z weekly 0.7 https://radar.offseq.com/threat/langgraph-checkpoint-sqlite-langgraph-sqlite-checkpoint-filter-key-sql-injection-poc-for-sqlitestore-ff336c870801899d 2026-10-29T04:11:53.080Z weekly 0.8 https://radar.offseq.com/threat/filelock-softfilelock-removes-a-live-holders-marker-when-another-user-forges-the-pid-in-a-writable-dd7f6f23014f329e 2026-10-29T04:13:25.342Z weekly 0.7 https://radar.offseq.com/threat/filelock-readwritelock-a-crafted-lock-database-makes-every-acquire-stall-or-hang-regardless-of-timeout-993536143abacb73 2026-10-29T04:13:20.033Z weekly 0.7 https://radar.offseq.com/threat/filelock-windowsfilelock-ignores-mode-a-0o600-lock-file-and-the-readwritelock-database-inherit-the-5e066f526c16f7b7 2026-10-29T04:13:14.884Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-and-softreadwritelock-adopt-a-protocol-directory-another-user-created-7a70870da364cca8 2026-10-29T04:13:08.655Z weekly 0.7 https://radar.offseq.com/threat/filelock-strictsoftfilelock-creates-its-claim-directories-without-the-lock-mode-so-another-local-user-d60c8333995ee4d8 2026-10-29T04:13:03.378Z weekly 0.7 https://radar.offseq.com/threat/filelock-softreadwritelock-follows-a-lock-tree-swapped-in-after-its-first-acquire-and-writes-lock-b3e976a6791501d0 2026-10-29T04:12:58.950Z weekly 0.7 https://radar.offseq.com/threat/langgraph-api-langgraph-javascript-custom-authentication-may-permit-cross-user-store-access-cve-2026-829786eb5c8297cb 2026-10-29T04:11:49.225Z weekly 0.8 https://radar.offseq.com/threat/zip-critical-parser-differential-security-control-bypass-via-dual-header-inconsistencies-zip-cloaking-a8a266279cabd7fb 2026-10-29T04:11:45.818Z weekly 0.9 https://radar.offseq.com/threat/re2js-quadratic-time-denial-of-service-in-re2js-lookbehind-matching-cve-2026-116795-4356da9bc4d6bfbf 2026-10-29T04:11:41.861Z weekly 0.8 https://radar.offseq.com/threat/i18next-http-backend-query-parameter-injection-through-and-in-lng-when-loadpathaddpath-puts-lng-in-the-90f291ffd3cf557d 2026-10-29T04:12:54.623Z weekly 0.7 https://radar.offseq.com/threat/autobahn-python-permessage-brotli-inflates-a-whole-frame-before-maxmessagepayloadsize-is-checked-5e9f60e81d1d1c7c 2026-10-29T04:12:51.013Z weekly 0.7 https://radar.offseq.com/threat/graphql-scalars-phonenumber-scalar-is-vulnerable-to-regular-expression-denial-of-service-cve-2026-aad4a5a90c349cb5 2026-10-29T04:00:45.705Z weekly 0.8 https://radar.offseq.com/threat/langgraph-cli-prints-the-registry-push-token-in-langgraph-deploy-verbose-output-cve-2026-115885-cef1036f667bfc34 2026-10-29T04:12:46.645Z weekly 0.7 https://radar.offseq.com/threat/systeminformation-has-prototype-pollution-in-networkstats-via-the-interface-name-cve-2026-116674-760a0370a9593461 2026-10-29T04:12:42.293Z weekly 0.7 https://radar.offseq.com/threat/systeminformation-has-path-traversal-in-linux-networkstats-that-allows-symlink-based-file-disclosure-904b2d4d3b656ce6 2026-10-29T04:12:38.430Z weekly 0.7 https://radar.offseq.com/threat/go-jose-panic-during-cbc-hmac-processing-cve-2026-116585-e5cf0899e07d4655 2026-10-29T04:12:34.002Z weekly 0.7 https://radar.offseq.com/threat/go-jose-panics-in-json-parsing-cve-2026-116586-20a3136dafd51ede 2026-10-29T04:12:30.230Z weekly 0.7 https://radar.offseq.com/threat/wasmtime-cranelift-backend-on-aarch64-can-jump-to-incorrect-target-on-large-wasm-brtable-instruction-ac08436b3c57d22d 2026-10-29T04:00:41.169Z weekly 0.9 https://radar.offseq.com/threat/vllm-dos-via-unbounded-chattemplate-jinja2-rendering-exhausts-the-renderer-thread-pool-cve-2026-115911-2fd63652d309d528 2026-10-29T04:12:26.768Z weekly 0.7 https://radar.offseq.com/threat/vllm-responses-api-bypasses-trustrequestchattemplate-for-chattemplatekwargs-cve-2026-115918-5839ecae143f4872 2026-10-29T04:12:22.067Z weekly 0.7 https://radar.offseq.com/threat/vllm-out-of-vocabulary-prompt-token-id-passes-input-validation-and-triggers-a-cuda-device-side-assert-661f36cea004f4ad 2026-10-29T04:12:18.040Z weekly 0.7 https://radar.offseq.com/threat/vllm-public-multimodal-shm-handle-forgery-reaches-worker-side-pickleloads-with-insecure-serialization-07a101a07172922e 2026-10-29T04:00:37.506Z weekly 0.8 https://radar.offseq.com/threat/vllm-untrusted-eps-inputs-can-trigger-denial-of-service-or-ghostscript-rce-cve-2026-115915-aaa0cd71e07b21bd 2026-10-29T04:00:33.807Z weekly 0.8 https://radar.offseq.com/threat/vllm-deepseek-ocr-image-processing-vulnerable-to-denial-of-service-cve-2026-115914-ecfa7103eac993b5 2026-10-29T04:12:13.958Z weekly 0.7 https://radar.offseq.com/threat/vllm-phi-4-multimodal-audio-encoder-materializes-and-retains-full-attention-matrices-a-single-max-480f0a4b0d6ced42 2026-10-29T04:01:53.083Z weekly 0.7 https://radar.offseq.com/threat/vllm-permissive-default-cors-origins-allow-cross-origin-requests-to-the-vllm-http-server-cve-2026-575fb9b0f5462021 2026-10-29T04:01:48.420Z weekly 0.7 https://radar.offseq.com/threat/onnx-out-of-bounds-read-in-rnngrulstm-shape-inference-old-opsets-missing-rank-check-cve-2026-115919-3a2cacf475826da3 2026-10-29T04:01:44.331Z weekly 0.7 https://radar.offseq.com/threat/onnx-null-pointer-dereference-in-scaninferencefunction-due-to-missing-required-attribute-cve-2026-8c1ee5eb8ddab136 2026-10-29T04:01:40.316Z weekly 0.7 https://radar.offseq.com/threat/onnx-denial-of-service-via-unchecked-expansion-of-packed-sub-byte-tensors-in-onnx-python-apis-cve-2026-54782d7aefcfdd8d 2026-10-29T04:01:37.150Z weekly 0.7 https://radar.offseq.com/threat/onnx-out-of-bounds-read-in-convtranspose-shape-inference-via-undersized-weight-rank-cve-2026-115920-54c6541a946e69a5 2026-10-29T04:01:15.073Z weekly 0.7 https://radar.offseq.com/threat/python-social-auth-openid-connect-nonce-is-not-bound-to-the-browser-session-so-a-stolen-authorization-443ced198e5f1f4d 2026-10-29T04:01:11.501Z weekly 0.7 https://radar.offseq.com/threat/mem0-cross-tenant-conversation-leak-via-unescaped-delimiter-collision-in-session-scope-key-e7ce302a5c7cb372 2026-10-29T04:01:07.671Z weekly 0.7 https://radar.offseq.com/threat/seroval-deserialization-invokes-attacker-chosen-callables-asynciteratorfactoryinstance-calls-49af2ec69a109239 2026-10-29T04:00:24.633Z weekly 0.8 https://radar.offseq.com/threat/seroval-fromjsonfromcrossjson-denial-of-service-via-unvalidated-array-node-length-cve-2026-116584-a0b27579e0ee91fe 2026-10-29T04:00:20.624Z weekly 0.8 https://radar.offseq.com/threat/seroval-fromjson-deserializer-trusts-node-supplied-array-length-and-sequence-doneat-unauthenticated-092a8a66a7685b53 2026-10-29T04:00:16.887Z weekly 0.8 https://radar.offseq.com/threat/seroval-script-injection-through-regexp-sources-in-serialized-output-cve-2026-116582-56f8bc44ad524e3d 2026-10-29T04:01:03.783Z weekly 0.7 https://radar.offseq.com/threat/seroval-code-injection-through-a-typed-arrays-own-constructor-property-cve-2026-116583-58c9858943d78456 2026-10-28T22:28:20.888Z weekly 0.7 https://radar.offseq.com/threat/vercel-waline-login-accepts-a-non-string-email-as-a-match-all-mongodb-query-c383dd4b776b7b58 2026-10-28T22:28:15.028Z weekly 0.7 https://radar.offseq.com/threat/knativedevpkg-admission-webhooks-allow-unbounded-request-body-memory-exhaustion-6d21c45562558da6 2026-10-28T22:28:09.718Z weekly 0.7 https://radar.offseq.com/threat/electrum-malicious-server-can-replace-a-just-broadcast-tx-and-try-to-trick-user-into-rbf-ing-it-cve-bd7d466b0e25820a 2026-10-28T22:28:04.184Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-46300-net-skbuff-preserve-shared-frag-marker-during-coalescing-in-linux-kernel-5d4c52c059ee9421 2026-10-28T22:27:59.668Z weekly 0.8 https://radar.offseq.com/threat/vmware-esx-contains-an-insufficient-logging-vulnerability-cve-2026-41709-057ab81cb6ae517d 2026-10-28T22:27:54.612Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-74580-vhost-reset-the-vring-metadata-cache-on-vring-reconfiguration-in-linux-kernel-06f471de471addbb 2026-10-28T22:27:51.395Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-flatpak-builder-where-git-hooks-are-not-disabled-when-applying-patch-sources-with-766364e38f2e73f8 2026-10-28T22:27:47.498Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-98097-tipc-dont-send-random-pad-bytes-in-resetactivate-messages-in-linux-kernel-3452ad6014fdd131 2026-10-28T22:27:43.846Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98099-ipv6-mcast-use-rcuassignpointer-for-rcu-list-updates-in-linux-kernel-8db2125138eb912a 2026-10-28T22:27:40.304Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98110-bluetooth-btintel-bound-firmware-id-by-tlv-length-in-linux-kernel-9efd9db24a65b845 2026-10-28T22:27:36.463Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-98111-bluetooth-btintel-validate-version-tlv-value-lengths-in-linux-kernel-cc83c8c3552a9add 2026-10-28T22:27:32.994Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-98098-tipc-fix-null-deref-in-tipcnamednodeup-on-empty-publication-list-in-linux-kernel-ca34bc98b02ee8c7 2026-10-28T22:27:29.567Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98113-ksmbd-rate-limit-unmapped-sid-errors-in-linux-kernel-ad7d8c1c2c2ea585 2026-10-28T22:27:25.974Z weekly 0.7 https://radar.offseq.com/threat/insufficient-policy-enforcement-in-chrome-devtools-mcp-in-google-chrome-on-linux-prior-to-150-allowed-ec6dbf8921cc8360 2026-10-29T03:30:27.000Z weekly 0.7 https://radar.offseq.com/threat/n8n-before-112385-2435-and-2441-contains-a-credential-guard-bypass-vulnerability-that-allows-editors-a1e6cbcf442d895f 2026-10-28T22:27:12.061Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-2435-and-244x-before-2441-accepts-a-client-supplied-workflow-id-and-caches-each-workflows-f94b32ebab705933 2026-10-28T22:27:08.206Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2435-and-2441-contains-a-regular-expression-denial-of-service-vulnerability-that-23e6cff5a975037c 2026-10-28T22:27:19.671Z weekly 0.7 https://radar.offseq.com/threat/n8n-before-112385-2x-before-2435-and-244x-before-2441-contains-a-filter-injection-vulnerability-in-the-d1a3fcdca35f5265 2026-10-28T22:27:04.391Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2435-and-2441-contains-an-authorization-bypass-vulnerability-that-allows-member-eef00ca3aa1e1266 2026-10-28T22:26:59.418Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2435-and-2441-contains-an-authorization-bypass-vulnerability-in-chat-hub-that-allows-307632628bbe81ea 2026-10-28T22:27:16.255Z weekly 0.7 https://radar.offseq.com/threat/n8n-before-2415-and-242x-before-2422-passes-a-failed-workflows-full-execution-context-including-the-b4fee91166e485ce 2026-10-28T22:26:55.806Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2x-before-2435-and-244x-before-2441-stores-credential-secrets-in-execution-error-data-882e4dc5a71b9139 2026-10-28T22:26:52.415Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2x-before-2435-and-244x-before-2441-saves-the-seatable-trigger-nodes-api-token-in-e48a733c299ad96a 2026-10-28T22:26:48.290Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2x-before-2435-and-244x-before-2441-contains-a-stored-cross-site-scripting-23ae184f20c359ce 2026-10-28T22:26:42.227Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2x-before-2435-and-244x-before-2441-contains-an-odata-filter-injection-vulnerability-c98941967e65f998 2026-10-28T22:15:06.766Z weekly 0.8 https://radar.offseq.com/threat/a-path-traversal-vulnerability-allows-a-remote-unauthenticated-attacker-to-execute-arbitrary-code-as-6c7fda8453a47065 2026-10-28T22:15:03.033Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-112385-2435-and-2441-contains-an-authorization-bypass-vulnerability-that-allows-c776fb942f784037 2026-10-28T22:14:59.951Z weekly 0.8 https://radar.offseq.com/threat/monai-from-120-before-161-contains-a-remote-code-execution-vulnerability-in-configworkflowinit-which-69a7a83c6ad6d2c2 2026-10-28T22:14:55.730Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-2414-and-242x-before-2421-contains-a-prototype-pollution-vulnerability-that-allows-low-2a783899315aa90a 2026-10-28T22:14:51.814Z weekly 0.8 https://radar.offseq.com/threat/monai-before-161-contains-an-insufficient-integrity-verification-vulnerability-in-checkhash-that-2563c9d532860fe4 2026-10-28T22:14:48.107Z weekly 0.7 https://radar.offseq.com/threat/siyuan-387-through-388-fails-to-normalize-windows-globalroot-device-namespace-aliases-bypassing-cve-ce6c09e7235a117f 2026-10-28T22:14:44.580Z weekly 0.7 https://radar.offseq.com/threat/tooljet-from-3202-lts-before-320242-lts-contains-an-authorization-bypass-in-signupdisableguard-which-70b61d795be19e9c 2026-10-28T22:14:40.929Z weekly 0.7 https://radar.offseq.com/threat/coder-before-22921-2300-before-23412-2350-before-2359-2360-before-2367-and-2370-before-2374-does-1c8a58a0ca7fe69e 2026-10-28T22:14:35.973Z weekly 0.7 https://radar.offseq.com/threat/espocrm-before-9311-and-10x-before-1008-contains-a-denial-of-service-vulnerability-in-which-the-e174ebefbab3b23d 2026-10-28T22:14:30.817Z weekly 0.8 https://radar.offseq.com/threat/n8n-before-2414-and-242x-before-2421-contains-a-missing-confirmation-vulnerability-in-the-local-990b9b69c56dec6b 2026-10-28T22:14:27.500Z weekly 0.7 https://radar.offseq.com/threat/go-chi-chi-before-550-contains-an-authentication-bypass-in-middlewaresupressnotfound-which-calls-match-5412de34ce32d285 2026-10-28T22:14:23.135Z weekly 0.7 https://radar.offseq.com/threat/n8n-before-112383-2414-and-2421-contains-a-server-side-request-forgery-vulnerability-in-the-slack-825f126e37f5d764 2026-10-28T22:14:19.960Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-ai-gateway-payload-processing-cve-2026-117574-dea4d3bf7326f5c3 2026-10-28T22:14:15.774Z weekly 0.9 https://radar.offseq.com/threat/wasmtime-wasi-in-wasmtime-before-36018-3700-before-4806-and-4900-before-4903-re-appends-a-trailing-106a5141c10ae35c 2026-10-28T22:14:00.158Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-kserve-a-namespace-scoped-user-with-createupdate-permissions-on-inferenceservice-cfabbc589492c988 2026-10-28T22:13:55.155Z weekly 0.8 https://radar.offseq.com/threat/the-authentication-endpoint-generates-an-error-message-that-includes-reflected-data-directly-from-the-dc2a3cfa9367ddcf 2026-10-28T22:14:10.632Z weekly 0.7 https://radar.offseq.com/threat/due-to-the-improper-implementation-of-access-control-rules-the-wso2-product-accepts-user-supplied-ecd0fe8f63ab359e 2026-10-28T22:13:50.241Z weekly 0.8 https://radar.offseq.com/threat/an-access-control-bypass-flaw-was-found-in-sambas-vfscephrgw-module-in-its-openat-function-cve-2026-ac2a9b2d634a53d4 2026-10-28T22:13:47.119Z weekly 0.8 https://radar.offseq.com/threat/a-vulnerability-in-the-remote-access-ssl-vpn-service-of-cisco-secure-firewall-adaptive-security-c5ce2a9b84b43bed 2026-10-28T22:13:38.962Z weekly 0.8 https://radar.offseq.com/threat/the-bpmn-system-rest-apis-do-not-sufficiently-validate-input-parameters-allowing-authenticated-users-ada8d66267d5bb5c 2026-10-28T22:13:35.507Z weekly 0.8 https://radar.offseq.com/threat/when-the-allowedscopes-configuration-is-enabled-the-oauth2-token-introspection-mechanism-does-not-c362a66ebc3edef0 2026-10-28T22:14:07.442Z weekly 0.7 https://radar.offseq.com/threat/in-deployments-of-wso2-identity-server-configured-with-a-case-insensitive-user-store-and-a-case-6ef1151c9b415ba3 2026-10-28T22:13:31.845Z weekly 0.8 https://radar.offseq.com/threat/cisco-catalyst-sd-wan-controller-authentication-bypass-vulnerability-dde705954abc8f87 2026-10-28T22:14:03.902Z weekly 0.8 https://radar.offseq.com/threat/n0n-ransomware-inside-an-ai-assisted-extortion-operation-18183f1576f88332 2026-10-29T04:01:29.347Z weekly 0.7 https://radar.offseq.com/threat/php2shell-weaponized-after-japanese-real-estate-extortion-e3564e8117231c44 2026-10-29T04:01:24.776Z weekly 0.7 https://radar.offseq.com/threat/68-gb-stolen-from-a-philippine-government-agencys-overseas-employment-databases-exposed-by-the-61da9865643eca2f 2026-10-29T04:01:20.155Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118577-server-side-request-forgery-in-maotoumao-musicfreedesktop-a51fd28a27bb7dd2 2026-10-29T04:00:59.716Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118538-dynamically-determined-object-attributes-in-a2ui-project-a2ui-1c7bbe77376b31db 2026-10-29T04:00:55.934Z weekly 0.7 https://radar.offseq.com/threat/cisco-secure-firewall-adaptive-security-appliance-and-secure-firewall-threat-defense-software-remote-fee86157bc1fd925 2026-10-29T04:00:52.143Z weekly 0.8 https://radar.offseq.com/threat/cisco-advance-notification-for-publication-of-november-4-2026-security-advisories-8e4fdf0fddb7fbf9 2026-10-29T04:00:48.201Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-heap-buffer-overflow-in-skia-in-google-chrome-prior-to-12806613113-allowed-a-ad995b476c7a2b1f 2026-10-29T04:00:12.455Z weekly 0.8 https://radar.offseq.com/threat/angularjs-this-affects-versions-of-the-package-angular-from-130-versions-of-the-package-cve-2024-21490-08111efa90e3ec5c 2026-10-29T04:00:07.094Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-access-issue-was-addressed-with-improved-access-restrictions-cve-2024-23206-df9b5eb0d3139c25 2026-10-29T04:00:01.878Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-23213-5bcc4bd1091106c3 2026-10-29T03:59:55.996Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-multiple-memory-corruption-issues-were-addressed-with-improved-memory-handling-ea3be1179e10054a 2026-10-29T03:59:47.474Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-type-confusion-issue-was-addressed-with-improved-checks-cve-2024-23222-707dbcf268862c86 2026-10-29T03:59:40.896Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-23226-e352d712fe223aee 2026-10-29T03:59:34.352Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-ui-handling-cve-2024-23254-f2643041bd83f857 2026-10-29T03:59:28.867Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-logic-issue-was-addressed-with-improved-validation-cve-2024-23263-1f1b894cffb5b822 2026-10-29T03:59:22.434Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-logic-issue-was-addressed-with-improved-checks-cve-2024-23271-5fd7de86c6dd48af 2026-10-29T03:59:11.070Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-injection-issue-was-addressed-with-improved-validation-cve-2024-23280-0eace591e0d8f103 2026-10-29T03:57:49.410Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-logic-issue-was-addressed-with-improved-state-management-cve-2024-23284-3fa7e4c2b01a8799 2026-10-29T03:59:04.398Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-27808-d7f83111c7c6b7b6 2026-10-29T03:57:34.969Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-27820-6a78edc88d6fcfdd 2026-10-29T03:57:28.684Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2024-27830-4633474f29ceac3a 2026-10-29T03:58:45.770Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-integer-overflow-was-addressed-with-improved-input-validation-cve-2024-27833-99869228790968fa 2026-10-29T03:57:22.592Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-27834-dd2a8e12c6bc5dc6 2026-10-29T03:57:16.523Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-by-adding-additional-logic-cve-2024-27838-63076c04500973f2 2026-10-29T03:58:39.877Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-with-improvements-to-the-noise-injection-algorithm-bb7b5a146cc10456 2026-10-29T03:58:34.104Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-bounds-checks-cve-2024-27851-83c0315cfc6dafb5 2026-10-29T03:56:53.700Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-27856-8ed63984b7c5dba4 2026-10-29T03:56:47.907Z weekly 0.8 https://radar.offseq.com/threat/rmqtt-broker-040-is-vulnerable-to-denial-of-service-dos-due-to-improper-session-resource-management-2a2dfb014e237dce 2026-10-29T03:56:40.734Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2024-0e3a5c2f3d66c18b 2026-10-29T03:58:29.069Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking-cve-2024-cb16465e277c9a3a 2026-10-29T03:58:22.196Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-out-of-bounds-read-was-addressed-with-improved-bounds-checking-cve-2024-56cc2b04049d2bff 2026-10-29T03:57:56.155Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2024-3068c848eb527a0a 2026-10-29T03:47:51.192Z weekly 0.9 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-with-improved-checks-cve-2024-40785-e2658cd8f36e16dd 2026-10-29T03:47:42.614Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-out-of-bounds-access-issue-was-addressed-with-improved-bounds-checking-cve-4783b900ef49d2e4 2026-10-29T03:47:36.624Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2024-40794-d699fdccb93c4cdf 2026-10-29T03:46:59.265Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-in-skiaallocfunc-of-skdeflatecpp-there-is-a-possible-out-of-bounds-write-cve-33291beaa5c722e0 2026-10-29T03:46:54.439Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-44185-4939bdeade199e8f 2026-10-29T03:46:48.594Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-cross-origin-issue-existed-with-iframe-elements-cve-2024-44187-96f1fd946a6aee2d 2026-10-29T03:46:41.862Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-44192-38248ad32de30348 2026-10-29T03:46:29.828Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-memory-corruption-issue-was-addressed-with-improved-input-validation-cve-a10600ffc2bf7ce8 2026-10-29T03:46:22.054Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-44296-32ac44b11ea8223f 2026-10-29T03:46:15.823Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-44308-07c6c5a4d98d3cbe 2026-10-29T03:46:06.037Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-cookie-management-issue-was-addressed-with-improved-state-management-cve-73ee1175cc9cf7d0 2026-10-29T03:45:58.381Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-54479-33e578fda686d35d 2026-10-29T03:45:45.780Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2024-54502-45f4d1a240968eeb 2026-10-29T03:45:39.490Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-type-confusion-issue-was-addressed-with-improved-memory-handling-cve-2024-b8132a5c2055aa95 2026-10-29T03:45:30.166Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-54534-fd3e7ea9d527e525 2026-10-29T03:45:15.964Z weekly 0.9 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-54543-a019be0d699c0fd1 2026-10-29T03:45:09.072Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-54551-a3313b1521f3627a 2026-10-29T03:44:29.154Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2024-54658-db2b3b093b58a704 2026-10-29T03:44:22.470Z weekly 0.7 https://radar.offseq.com/threat/libmojolicious-perl-mojolicious-versions-from-728-through-945-for-perl-will-generate-weak-hmac-cve-7f81bf6eb8d7d0d8 2026-10-29T03:44:17.377Z weekly 0.7 https://radar.offseq.com/threat/mp4v2-through-213-contains-a-heap-based-out-of-bounds-read-in-mp4filegetchapters-that-allows-attackers-23477487a2c11e85 2026-10-29T03:44:13.670Z weekly 0.7 https://radar.offseq.com/threat/llamacpp-before-b2731-contains-an-out-of-bounds-read-vulnerability-in-llamamodelloader-that-allows-daad50647501dee4 2026-10-29T03:44:10.544Z weekly 0.7 https://radar.offseq.com/threat/llamacpp-before-b3701-contains-an-out-of-bounds-read-vulnerability-in-llamadecodeinternal-and-2c8c20a581e92382 2026-10-29T03:44:06.113Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-the-webchannel-api-which-is-used-to-transport-various-information-across-processes-did-not-9872838025f6c38a 2026-10-29T03:44:02.418Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-assuming-a-controlled-failed-memory-allocation-an-attacker-could-have-caused-a-cve-2025-0238-19bfd0d4b62f151c 2026-10-29T03:43:56.689Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-when-using-alt-svc-alpn-did-not-properly-validate-certificates-when-the-original-server-is-cve-049b8e7070cfb7a7 2026-10-29T03:43:51.149Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-parsing-a-javascript-module-as-json-could-under-some-circumstances-cause-cross-compartment-cve-7c04a04f400bb487 2026-10-29T03:43:45.733Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-when-segmenting-specially-crafted-text-segmentation-would-corrupt-memory-leading-to-a-cve-2025-4fa74d14f22b9ef5 2026-10-29T03:43:05.529Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-133-thunderbird-133-firefox-esr-11518-firefox-esr-cve-0601d71afa2c7184 2026-10-29T03:42:59.497Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-133-thunderbird-133-firefox-esr-1285-and-cve-2025-0243-a03618904a38eff1 2026-10-29T03:42:53.757Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-133-and-thunderbird-133-cve-2025-0247-df3847976a811335 2026-10-29T03:42:47.424Z weekly 0.9 https://radar.offseq.com/threat/qtwebkit-opensource-src-integer-overflow-in-skia-in-google-chrome-prior-to-1320683483-allowed-a-remote-857d35f8b6b193c3 2026-10-29T03:42:25.945Z weekly 0.8 https://radar.offseq.com/threat/thunderbird-displayed-an-incorrect-sender-address-if-the-from-field-of-an-email-used-the-invalid-group-358b7ad0ff99bfdd 2026-10-29T03:42:41.547Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-an-attacker-could-have-caused-a-use-after-free-via-crafted-xslt-data-leading-to-a-cve-2025-1009-51b31f3568af919e 2026-10-29T03:42:20.848Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-an-attacker-could-have-caused-a-use-after-free-via-the-custom-highlight-api-leading-to-a-cve-dfe9cd886d5b3631 2026-10-29T03:42:15.017Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-a-bug-in-webassembly-code-generation-could-have-lead-to-a-crash-cve-2025-1011-81eb84c06ac72cec 2026-10-29T03:42:09.672Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-a-race-during-concurrent-delazification-could-have-led-to-a-use-after-free-cve-2025-1012-7cbcc626547a317c 2026-10-29T03:42:03.088Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-a-race-condition-could-have-led-to-private-browsing-tabs-being-opened-in-normal-browsing-cve-4df8bb19ddf7bfa3 2026-10-29T03:42:35.721Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-certificate-length-was-not-properly-checked-when-added-to-a-certificate-store-cve-2025-1014-66f4e437f6cee11f 2026-10-29T03:41:56.675Z weekly 0.8 https://radar.offseq.com/threat/the-thunderbird-address-book-uri-fields-contained-unsanitized-links-cve-2025-1015-edb5004f976c7782 2026-10-29T03:42:30.062Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-134-thunderbird-134-firefox-esr-11519-firefox-esr-cve-f12ccc04007b745e 2026-10-29T03:41:51.176Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-134-thunderbird-134-firefox-esr-1286-and-cve-2025-1017-3da932a635a1eff9 2026-10-29T03:41:44.978Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-the-fullscreen-notification-is-prematurely-hidden-when-fullscreen-is-re-requested-quickly-by-a179ae7283f947c3 2026-10-29T03:31:14.257Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-the-z-order-of-the-browser-windows-could-be-manipulated-to-hide-the-fullscreen-notification-de1c3909b3f5aa68 2026-10-29T03:31:08.418Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-134-and-thunderbird-134-cve-2025-1020-9831cfe3a123d606 2026-10-29T03:31:01.960Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-135-cve-2025-1414-bd34cf87e7fdbcce 2026-10-29T03:30:56.861Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-on-windows-a-compromised-content-process-could-use-bad-streamdata-sent-over-audioipc-to-cve-6a7bbb078193762e 2026-10-29T03:30:52.389Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-it-was-possible-to-cause-a-use-after-free-in-the-content-process-side-of-a-webtransport-cve-b66c2a36b737a6d0 2026-10-29T03:30:45.664Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-an-inconsistent-comparator-in-xslttxnodesorter-could-have-resulted-in-potentially-cve-2025-1932-5ede206f86fc1875 2026-10-29T03:30:40.004Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-on-64-bit-cpus-when-the-jit-compiles-wasm-i32-return-values-they-can-pick-up-bits-from-left-e6416654dc33fadc 2026-10-29T03:30:33.219Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-it-was-possible-to-interrupt-the-processing-of-a-regexp-bailout-and-run-additional-javascript-f925be196184da16 2026-10-29T03:30:27.077Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-web-page-could-trick-a-user-into-setting-that-site-as-the-default-handler-for-a-custom-url-a0b7d182e00e0ee9 2026-10-29T03:30:21.357Z weekly 0.7 https://radar.offseq.com/threat/jar-urls-retrieve-local-file-content-packaged-in-a-zip-archive-cve-2025-1936-cdc6505715e74022 2026-10-29T03:30:16.048Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-135-thunderbird-135-firefox-esr-11520-firefox-esr-cve-7923b7520570fa02 2026-10-29T03:30:10.287Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-135-thunderbird-135-firefox-esr-1287-and-cve-2025-1938-d8b20b7d9e00741c 2026-10-29T03:30:04.008Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-when-stringtouppercase-caused-a-string-to-get-longer-it-was-possible-for-uninitialized-cve-9773cf229f3788b1 2026-10-29T03:29:37.956Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-135-and-thunderbird-135-cve-2025-1943-73620dc887054435 2026-10-29T03:29:31.527Z weekly 0.8 https://radar.offseq.com/threat/by-crafting-a-malformed-file-name-for-an-attachment-in-a-multipart-message-an-attacker-can-trick-cafb49bcd96ca6d1 2026-10-29T03:29:59.127Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-javascript-code-running-while-transforming-a-document-with-the-xsltprocessor-could-lead-to-a-349238344f0560a5 2026-10-29T03:29:53.855Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-crafted-url-containing-specific-unicode-characters-could-have-hidden-the-true-origin-of-the-55611dfdf0089f25 2026-10-29T03:29:25.775Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-136-thunderbird-136-firefox-esr-1288-and-cve-2025-3030-aff9d86c9949c084 2026-10-29T03:29:20.680Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-an-attacker-could-read-32-bits-of-values-spilled-onto-the-stack-in-a-jit-compiled-function-cve-c5d86eaa516d1bcc 2026-10-29T03:29:48.721Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-leaking-of-file-descriptors-from-the-fork-server-to-web-content-processes-could-allow-for-cve-257e22e64ee6a4c8 2026-10-29T03:29:15.398Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-136-and-thunderbird-136-cve-2025-3034-2f688e2672c0bde5 2026-10-29T03:29:09.699Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-by-first-using-the-ai-chatbot-in-one-tab-and-later-activating-it-in-another-tab-the-document-cacb75024147131e 2026-10-29T03:29:42.569Z weekly 0.7 https://radar.offseq.com/threat/qtbase-opensource-src-gles-there-is-a-heap-based-buffer-overflow-vulnerability-in-b1b9e4861d0dcdc5 2026-10-29T03:28:55.233Z weekly 0.7 https://radar.offseq.com/threat/thunderbird-processes-the-x-mozilla-external-attachment-url-header-to-handle-attachments-which-can-be-0cc9ba937206a615 2026-10-29T03:28:51.614Z weekly 0.7 https://radar.offseq.com/threat/thunderbird-when-an-email-contains-multiple-attachments-with-external-links-via-the-x-mozilla-external-488e1197f162c172 2026-10-29T03:28:45.427Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-race-condition-existed-in-nshttptransaction-that-could-have-been-exploited-to-cause-memory-8ffcdcd12160d2cb 2026-10-29T03:28:39.398Z weekly 0.7 https://radar.offseq.com/threat/thunderbird-parses-addresses-in-a-way-that-can-allow-sender-spoofing-in-case-the-server-allows-an-cve-1a2c787541ef1bed 2026-10-29T03:28:35.022Z weekly 0.8 https://radar.offseq.com/threat/thunderbirds-handling-of-the-x-mozilla-external-attachment-url-header-can-be-exploited-to-execute-cve-17dc8def94eb6182 2026-10-29T03:28:31.555Z weekly 0.8 https://radar.offseq.com/threat/thunderbird-it-was-possible-to-craft-an-email-that-showed-a-tracking-link-as-an-attachment-cve-2025-7aa0f754a8562ef8 2026-10-29T03:28:20.507Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-process-isolation-vulnerability-in-thunderbird-stemmed-from-improper-handling-of-javascript-5e2375a8b6a6b8de 2026-10-29T03:27:21.090Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-an-attacker-with-control-over-a-content-process-could-potentially-leverage-the-privileged-14de96ffef7c89ce 2026-10-29T03:27:15.788Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-a-vulnerability-was-identified-in-thunderbird-where-xpath-parsing-could-trigger-undefined-cve-5daa81c9bdcf3dc3 2026-10-29T03:28:16.860Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-security-vulnerability-in-thunderbird-allowed-malicious-sites-to-use-redirects-to-send-d6f903841ebabd98 2026-10-29T03:28:11.375Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-due-to-insufficient-escaping-of-special-characters-in-the-copy-as-curl-feature-an-attacker-24c90ce5eb45fe47 2026-10-29T03:28:06.383Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-137-thunderbird-137-firefox-esr-1289-and-cve-2025-4091-2a1c52529acfb7b4 2026-10-29T03:27:10.358Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-137-and-thunderbird-137-cve-2025-4092-e6e05d1c67aaeeeb 2026-10-29T03:28:01.052Z weekly 0.7 https://radar.offseq.com/threat/memory-safety-bug-present-in-firefox-esr-1289-and-thunderbird-1289-cve-2025-4093-b48a42c83f87c63c 2026-10-29T03:27:05.108Z weekly 0.8 https://radar.offseq.com/threat/qtbase-opensource-src-improper-link-resolution-before-file-access-link-following-vulnerability-in-a6d8514e4e788619 2026-10-29T03:27:00.337Z weekly 0.8 https://radar.offseq.com/threat/improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-erlang-otp-6fb9c1125fed90b0 2026-10-29T03:27:55.774Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-an-attacker-was-able-to-perform-an-out-of-bounds-read-or-write-on-a-javascript-promise-object-0e05c34f9033b606 2026-10-29T03:26:55.675Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-an-attacker-was-able-to-perform-an-out-of-bounds-read-or-write-on-a-javascript-object-by-cve-e621135950c8d8b0 2026-10-29T03:26:49.687Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-error-handling-for-script-execution-was-incorrectly-isolated-from-web-content-which-could-cve-74808cee94aeb492 2026-10-29T03:27:48.050Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-due-to-insufficient-escaping-of-the-newline-character-in-the-copy-as-curl-feature-an-attacker-dcdc8c37f1e1ff56 2026-10-29T03:27:42.764Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-due-to-insufficient-escaping-of-the-ampersand-character-in-the-copy-as-curl-feature-an-07de877a11094b1f 2026-10-29T03:27:37.354Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-script-elements-loading-cross-origin-resources-generated-load-and-error-events-which-leaked-8f1de8aa92d13811 2026-10-29T03:27:32.304Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-clickjacking-vulnerability-could-have-been-used-to-trick-a-user-into-leaking-saved-payment-864875bd248d3b08 2026-10-29T03:27:26.971Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-138-thunderbird-138-firefox-esr-12810-and-cve-2025-5268-5d3f876a2562de16 2026-10-29T03:26:43.015Z weekly 0.8 https://radar.offseq.com/threat/memory-safety-bug-present-in-firefox-esr-12810-and-thunderbird-12810-cve-2025-5269-6a057b17fc8d2ea2 2026-10-29T03:16:15.397Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-in-certain-cases-sni-could-have-been-sent-unencrypted-even-when-encrypted-dns-was-enabled-cve-ae0b36d39c127668 2026-10-29T03:16:11.944Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-previewing-a-response-in-devtools-ignored-csp-headers-which-could-have-allowed-content-cve-b2beaeda700e1f22 2026-10-29T03:16:04.277Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-138-and-thunderbird-138-cve-2025-5272-eb95c8252b293cfa 2026-10-29T03:15:58.399Z weekly 0.8 https://radar.offseq.com/threat/qtimageformats-opensource-src-when-loading-a-specifically-crafted-icns-format-image-file-in-qimage-cve-7afbbd62a876f0c0 2026-10-29T03:15:52.872Z weekly 0.7 https://radar.offseq.com/threat/thunderbird-a-crafted-html-email-using-mailbox-links-can-trigger-automatic-unsolicited-downloads-of-99ec8e30a1fe8f19 2026-10-29T03:15:49.484Z weekly 0.7 https://radar.offseq.com/threat/qt6-base-when-passing-values-outside-of-the-expected-range-to-qcolortransfergenericfunction-it-can-185007a09b703dda 2026-10-29T03:15:42.133Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-use-after-free-in-fontfaceset-resulted-in-a-potentially-exploitable-crash-cve-2025-6424-86c975d7237157c9 2026-10-29T03:15:37.292Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-an-attacker-who-enumerated-resources-from-the-webcompat-extension-could-have-obtained-a-65ede5d09562c217 2026-10-29T03:15:31.275Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-the-executable-file-warning-did-not-warn-users-before-opening-files-with-the-terminal-d0c6aa9d77c47fbe 2026-10-29T03:14:46.953Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-an-attacker-was-able-to-bypass-the-connect-src-directive-of-a-content-security-policy-by-cve-5ccbecc5fad5bfdb 2026-10-29T03:14:42.116Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-when-a-url-was-provided-in-a-link-querystring-parameter-firefox-for-android-would-follow-that-ec3ff10fc1392b5a 2026-10-29T03:15:26.214Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-firefox-could-have-incorrectly-parsed-a-url-and-rewritten-it-to-the-youtubecom-domain-when-cve-06bb2049565be5d4 2026-10-29T03:15:21.617Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-when-a-file-download-is-specified-via-the-content-disposition-header-that-directive-would-be-29eae30c85eb9a83 2026-10-29T03:15:15.752Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-when-a-link-can-be-opened-in-an-external-application-firefox-for-android-will-by-default-cve-c7496d9f344acad5 2026-10-29T03:15:09.851Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-when-multi-account-containers-was-enabled-dns-requests-could-have-bypassed-a-socks-proxy-when-47eed804c8f98f35 2026-10-29T03:14:36.965Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-if-a-user-visited-a-webpage-with-an-invalid-tls-certificate-and-granted-an-exception-the-38e825e632dfd383 2026-10-29T03:14:31.407Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-the-exception-page-for-the-https-only-feature-displayed-when-a-website-is-opened-via-http-efb35fc8968d87c7 2026-10-29T03:15:05.178Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-if-a-user-saved-a-response-from-the-network-tab-in-devtools-using-the-save-as-context-menu-2c38fd43f45ed2c0 2026-10-29T03:14:25.470Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-139-and-thunderbird-139-cve-2025-6436-d57613c669dac08c 2026-10-29T03:14:19.513Z weekly 0.8 https://radar.offseq.com/threat/in-jakarta-mail-versions-prior-to-202-it-is-possible-to-perform-an-smtp-injection-by-utilizing-the-r-ff947d704f80f00b 2026-10-29T03:14:07.512Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-on-64-bit-platforms-ionmonkey-jit-only-wrote-32-bits-of-the-64-bit-return-value-space-on-the-72a105ce3f49befe 2026-10-29T03:14:59.914Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-on-arm64-a-wasm-brtable-instruction-with-a-lot-of-entries-could-lead-to-the-label-being-too-4505ed965da7e82f 2026-10-29T03:14:00.561Z weekly 0.9 https://radar.offseq.com/threat/thunderbird-executed-javascript-urls-when-used-in-object-and-embed-tags-cve-2025-8029-d84fcfb04f34de11 2026-10-29T03:13:54.418Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-insufficient-escaping-in-the-copy-as-curl-feature-could-potentially-be-used-to-trick-a-user-a265fbd31cbef0fe 2026-10-29T03:13:48.588Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-the-usernamepassword-part-was-not-correctly-stripped-from-urls-in-csp-reports-potentially-cve-60b4e52fde024450 2026-10-29T03:13:42.450Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-xslt-document-loading-did-not-correctly-propagate-the-source-document-which-bypassed-its-csp-f2272d4190062eec 2026-10-29T03:13:34.971Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-the-javascript-engine-did-not-handle-closed-generators-correctly-and-it-was-possible-to-cve-a9626a9d2b22c662 2026-10-29T03:13:28.710Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-11525-firefox-esr-12812-thunderbird-esr-12812-ea9ca64870caf9f5 2026-10-29T03:13:22.389Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-12812-thunderbird-esr-12812-firefox-esr-1400-cve-3799b261cefb83ca 2026-10-29T03:13:16.364Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-thunderbird-cached-cors-preflight-responses-across-ip-address-changes-cve-2025-8036-9d5216e0d0e9a80c 2026-10-29T03:13:09.645Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-setting-a-nameless-cookie-with-an-equals-sign-in-the-value-shadowed-other-cookies-cve-2025-8037-936752122aab22ad 2026-10-29T03:13:03.711Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-thunderbird-ignored-paths-when-checking-the-validity-of-navigations-in-a-frame-cve-2025-8038-1dbe3b1215f3b48e 2026-10-29T03:12:58.311Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-in-some-cases-search-terms-persisted-in-the-url-bar-even-after-navigating-away-from-the-cve-a81cac25d888d078 2026-10-29T03:12:52.721Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-1400-thunderbird-esr-1400-firefox-140-and-cve-2025-fdfdccc0d2c4fbd2 2026-10-29T03:12:47.822Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-focus-incorrectly-truncated-urls-towards-the-beginning-instead-of-around-the-origin-cve-2025-c9949db1c99f8edf 2026-10-29T03:12:41.992Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-140-and-thunderbird-140-cve-2025-8044-136c81148c6e481c 2026-10-29T03:12:19.956Z weekly 0.9 https://radar.offseq.com/threat/curl-1-a-cookie-is-set-using-the-secure-keyword-for-httpstarget-2-cve-2025-9086-fb8f03bc7c7855eb 2026-10-29T03:12:15.006Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-use-after-free-in-the-graphics-canvas2d-component-cve-2025-10527-95274cbc8a3b2e7b 2026-10-29T03:12:10.613Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-undefined-behavior-invalid-pointer-in-the-graphics-canvas2d-component-5987a402af68af6e 2026-10-29T03:12:04.837Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-same-origin-policy-bypass-in-the-layout-component-cve-2025-10529-85b9f272ddfcb153 2026-10-29T03:12:37.257Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-javascript-gc-component-cve-2025-10532-4986ada1e15a0187 2026-10-29T03:12:31.425Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-integer-overflow-in-the-svg-component-cve-2025-10533-61d2054c4bcc8a9b 2026-10-29T03:11:58.511Z weekly 0.8 https://radar.offseq.com/threat/information-disclosure-in-the-networking-cache-component-cve-2025-10536-0bf67d8f980b8752 2026-10-29T03:12:25.755Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-1402-thunderbird-esr-1402-firefox-142-and-cve-2025-8387b27f8f1f7540 2026-10-29T03:11:53.050Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-jit-miscompilation-in-the-javascript-engine-jit-component-cve-2025-11153-0d3a37bfb27f909b 2026-10-29T03:11:49.179Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-an-attacker-was-able-to-perform-memory-corruption-in-the-gmp-process-which-processes-cve-2025-d1f7dbc454db845c 2026-10-29T03:11:44.325Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-same-origin-policy-bypass-in-the-graphics-canvas2d-component-cve-2025-9180-1953172a60286972 2026-10-29T03:01:31.076Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-uninitialized-memory-in-the-javascript-engine-component-cve-2025-9181-cd33a1ec00198f55 2026-10-29T03:01:23.974Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-denial-of-service-due-to-out-of-memory-in-the-graphics-webrender-component-cve-2025-9182-2c41b0aa4d0e6e61 2026-10-29T03:01:16.272Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-1401-thunderbird-esr-1401-firefox-141-and-cve-2025-7a84102beb69426d 2026-10-29T03:01:09.440Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-11526-firefox-esr-12813-thunderbird-esr-12813-d07b07a86f8c69cb 2026-10-29T03:01:02.963Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-141-and-thunderbird-141-cve-2025-9187-b3fe3dfec4b5efde 2026-10-29T03:00:58.333Z weekly 0.9 https://radar.offseq.com/threat/python-xmltodict-xml-injection-vulnerability-in-xmltodict-allows-input-data-manipulation-cve-2025-9375-dec2fc1e21f0c6fc 2026-10-29T03:00:52.295Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-use-after-free-in-mediatrackgraphimplgetinstance-cve-2025-11708-b13de68257954168 2026-10-29T03:00:45.897Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-a-compromised-web-process-was-able-to-trigger-out-of-bounds-reads-and-writes-in-a-more-cve-701fe05e34c72919 2026-10-29T03:00:40.285Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-a-compromised-web-process-using-malicious-ipc-messages-could-have-caused-the-privileged-0cb68f294d80fe75 2026-10-29T03:00:34.888Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-there-was-a-way-to-change-the-value-of-javascript-object-properties-that-were-supposed-to-be-2866ac98ddbf6ea1 2026-10-29T03:00:28.589Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-a-malicious-page-could-have-used-the-type-attribute-of-an-object-tag-to-override-the-default-0aa1de42ee94c700 2026-10-29T03:00:21.660Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-insufficient-escaping-in-the-copy-as-curl-feature-could-have-been-used-to-trick-a-user-cve-bd00270dc3aa8e8e 2026-10-29T03:00:14.831Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-11528-firefox-esr-1403-thunderbird-esr-1403-cve-2025-6cd7bc51c00d5ed8 2026-10-29T02:59:41.646Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-1403-thunderbird-esr-1403-firefox-143-and-cve-2025-a7a6674429f3cb17 2026-10-29T02:59:36.362Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-links-in-a-sandboxed-iframe-could-open-an-external-app-on-android-without-the-required-cve-8ee5080f622cf024 2026-10-29T03:00:07.284Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-when-switching-between-android-apps-using-the-card-carousel-firefox-shows-a-black-screen-as-507e741ff31b6aa5 2026-10-29T02:59:32.837Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-when-the-address-bar-was-hidden-due-to-scrolling-on-android-a-malicious-page-could-create-a-327cf160e35da507 2026-10-29T03:00:00.335Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-starting-in-thunderbird-143-the-use-of-the-native-messaging-api-by-web-extensions-on-windows-ff0f9e893a03362a 2026-10-29T02:59:28.395Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-the-firefox-and-firefox-focus-ui-for-the-android-custom-tab-feature-only-showed-the-site-cve-3daccc8d801af732 2026-10-29T02:59:22.742Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-present-in-firefox-143-and-thunderbird-143-cve-2025-11721-f798be00767eabe1 2026-10-29T02:59:17.954Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-race-condition-in-the-graphics-component-cve-2025-13012-cfabeb83c1efd4a1 2026-10-29T02:59:14.723Z weekly 0.8 https://radar.offseq.com/threat/mitigation-bypass-in-the-dom-core-html-component-cve-2025-13013-d49a3fb25924f086 2026-10-29T02:59:55.471Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-use-after-free-in-the-audiovideo-component-cve-2025-13014-8eb0b1b3cc2efb2f 2026-10-29T02:59:08.754Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-spoofing-issue-in-firefox-cve-2025-13015-37b9cad0f6295a62 2026-10-29T02:59:48.434Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-javascript-webassembly-component-cve-2025-13016-a34edea026b3aad5 2026-10-29T02:59:02.867Z weekly 0.8 https://radar.offseq.com/threat/same-origin-policy-bypass-in-the-dom-notifications-component-cve-2025-13017-54af56def8bed6bc 2026-10-29T02:58:57.797Z weekly 0.8 https://radar.offseq.com/threat/mitigation-bypass-in-the-dom-security-component-cve-2025-13018-b3b1646dfac2f49d 2026-10-29T02:58:52.453Z weekly 0.8 https://radar.offseq.com/threat/same-origin-policy-bypass-in-the-dom-workers-component-cve-2025-13019-74e8690ffb31f53c 2026-10-29T02:58:47.159Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-webrtc-audiovideo-component-cve-2025-13020-de623e63e0824fe9 2026-10-29T02:58:42.438Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-jit-miscompilation-in-the-javascript-engine-jit-component-cve-2025-13024-15912564f48c89b9 2026-10-29T02:58:36.648Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-144-and-thunderbird-144-cve-2025-13027-797dcea12e31bdf0 2026-10-29T02:58:32.206Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-webrtc-signaling-component-cve-2025-14321-b3c92ee51a388fc6 2026-10-29T02:58:27.253Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-incorrect-boundary-conditions-in-the-graphics-canvaswebgl-component-cve-c18b505ca33d5680 2026-10-29T02:58:21.385Z weekly 0.8 https://radar.offseq.com/threat/privilege-escalation-in-the-dom-notifications-component-cve-2025-14323-d3ebd4c62d36c118 2026-10-29T02:58:15.234Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-jit-miscompilation-in-the-javascript-engine-jit-component-cve-2025-14324-581e30fe530fd9d5 2026-10-29T02:58:04.777Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-jit-miscompilation-in-the-javascript-engine-jit-component-cve-2025-14325-2f00299ea0395e17 2026-10-29T02:57:59.172Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-spoofing-issue-in-the-downloads-panel-component-cve-2025-14327-de0d6c5d83f9e257 2026-10-29T02:57:18.493Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-netmonitor-component-cve-2025-14328-c6abe197d0d12f6c 2026-10-29T02:57:13.061Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-netmonitor-component-cve-2025-14329-e0f9af96632ccd6e 2026-10-29T02:57:07.790Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-jit-miscompilation-in-the-javascript-engine-jit-component-cve-2025-14330-7b8674b9469f1031 2026-10-29T02:57:02.396Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-same-origin-policy-bypass-in-the-request-handling-component-cve-2025-14331-63b63f6bddf780da 2026-10-29T02:57:53.691Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-145-and-thunderbird-145-cve-2025-14332-61044c8e016ac137 2026-10-29T02:56:57.203Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-1405-thunderbird-esr-1405-firefox-145-and-cve-2025-8e22457c44337d0f 2026-10-29T02:56:52.478Z weekly 0.8 https://radar.offseq.com/threat/when-doing-tls-related-transfers-with-reused-easy-or-multi-handles-and-altering-the-42258287343057eb 2026-10-29T02:57:48.141Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-146-cve-2025-14861-29bbc88bc0d448bd 2026-10-29T02:56:48.928Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-access-restrictions-to-the-file-system-44b1e4abc46ecaba 2026-10-29T02:57:41.088Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-privacy-issue-was-addressed-with-improved-handling-of-files-cve-2025-24150-8499dafefe880e00 2026-10-29T02:56:44.170Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-24158-3fe7242882ccd1e0 2026-10-29T02:57:33.563Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2025-24162-5771f5c71fb74d93 2026-10-29T02:57:26.199Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2025-24189-46fbd6605f4a41f6 2026-10-29T02:47:17.978Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-out-of-bounds-write-issue-was-addressed-with-improved-checks-to-prevent-cve-2ed31e2b67e8efec 2026-10-29T02:47:11.484Z weekly 0.9 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-buffer-overflow-issue-was-addressed-with-improved-memory-handling-cve-2025-7400ba9d9074f612 2026-10-29T02:47:04.343Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-with-improved-handling-of-floats-cve-2025-24213-f1367378fc3b0ce6 2026-10-29T02:46:57.481Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-24216-f78d4dc534802e18 2026-10-29T02:46:50.824Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-24223-e2f12f7e18e9ecd2 2026-10-29T02:46:44.540Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-24264-699945215955ea1c 2026-10-29T02:46:38.480Z weekly 0.9 https://radar.offseq.com/threat/thunderbird-when-requesting-an-openpgp-key-from-a-wkd-server-an-incorrect-padding-size-was-used-and-a-f6761dd9752b07ee 2026-10-29T02:46:28.543Z weekly 0.7 https://radar.offseq.com/threat/thunderbird-certain-crafted-mime-email-messages-that-claimed-to-contain-an-encrypted-openpgp-message-296415a8ea77b775 2026-10-29T02:46:22.378Z weekly 0.8 https://radar.offseq.com/threat/golang-github-go-redis-redis-prior-to-955-963-and-972-go-redis-potentially-responds-out-of-cve-2025-7ed61d249142a01a 2026-10-29T02:46:15.936Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-ff86d973e8050b59 2026-10-29T02:46:11.817Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-31204-7ea2c4c326ec7a3d 2026-10-29T02:44:56.838Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2025-31205-f726f53344a74463 2026-10-29T02:46:04.430Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-type-confusion-issue-was-addressed-with-improved-state-handling-cve-2025-d52b6ad599c233c9 2026-10-29T02:45:57.241Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2025-31215-c0e8b6d1f21f6621 2026-10-29T02:45:50.189Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2025-31223-156b4d31e3c8bf20 2026-10-29T02:44:50.410Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-with-improved-memory-handling-cve-2025-31257-cac9fb11ebc694ae 2026-10-29T02:45:44.045Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-31273-04ab8cb45770baf6 2026-10-29T02:44:44.945Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-31277-9b8bf24c36ea1ed3 2026-10-29T02:44:39.395Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-31278-9330c705c4686ecc 2026-10-29T02:44:32.680Z weekly 0.8 https://radar.offseq.com/threat/libapache-session-perl-apachesessiongeneratemd5-versions-through-194-for-perl-create-insecure-cve-2025-812381d03c32d996 2026-10-29T02:44:27.050Z weekly 0.9 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43211-d46b8608f0983fd1 2026-10-29T02:45:08.842Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43212-e7363c2ad957823a 2026-10-29T02:45:03.168Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43213-9b58231bd0910f8e 2026-10-29T02:44:23.505Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43214-a270fd4c7cd2337e 2026-10-29T02:44:18.204Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-31561ec8b7f733fc 2026-10-29T02:44:11.069Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2025-43227-db58139416d14da6 2026-10-29T02:42:27.966Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-ui-cve-2025-43228-53be8367de950a07 2026-10-29T02:44:04.686Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-logic-issue-was-addressed-with-improved-checks-cve-2025-43240-9c728ba6d7d02b50 2026-10-29T02:43:59.131Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-an-out-of-bounds-read-was-addressed-with-improved-input-validation-cve-2025-be4756bf9a48abf0 2026-10-29T02:43:53.560Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43272-db24eb33fb638c91 2026-10-29T02:43:47.780Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-correctness-issue-was-addressed-with-improved-checks-cve-2025-43342-e30779b414d5be76 2026-10-29T02:42:20.908Z weekly 0.9 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43343-76af13cfe37bb4a1 2026-10-29T02:42:14.565Z weekly 0.9 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-handling-of-caches-cve-2025-43356-d1bceefbcd05cfe5 2026-10-29T02:43:42.239Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-a0aa70c6842f85dc 2026-10-29T02:43:35.590Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-handling-of-caches-cve-2025-43392-1ce42ee1fc6f871f 2026-10-29T02:43:29.288Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43419-31a851e2ea4ecde6 2026-10-29T02:42:08.005Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-multiple-issues-were-addressed-by-disabling-array-allocation-sinking-cve-2025-3c0d0b43e9f823c9 2026-10-29T02:43:24.026Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43425-78ebf5a80c9760c4 2026-10-29T02:43:18.304Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2025-43427-c6ed3c92789e10bc 2026-10-29T02:43:12.239Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-buffer-overflow-was-addressed-with-improved-bounds-checking-cve-2025-43429-752156831488bc89 2026-10-29T02:43:06.029Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2025-43430-70a1d537ca2c09ae 2026-10-29T02:42:59.744Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43431-7e2dbc6489e588c1 2026-10-29T02:42:02.259Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-ad0438f2af0e9c23 2026-10-29T02:42:53.685Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43433-e242b242952cd8a6 2026-10-29T02:41:55.446Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-35293874b3337ab5 2026-10-29T02:42:47.814Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-93529392fc6cb2e9 2026-10-29T02:41:49.543Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-with-improved-checks-cve-2025-43440-fa1ca999bfe0fbe3 2026-10-29T02:42:42.220Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2025-43441-2b19cf56f22558d7 2026-10-29T02:41:43.507Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-with-improved-checks-cve-2025-43443-d5977d6df07869d5 2026-10-29T02:42:34.803Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-0161291ceea0ab25 2026-10-29T02:30:57.583Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2025-43458-ed27ac4c8c6db587 2026-10-29T02:30:51.276Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-checks-cve-2025-43480-1612f9d4e21f1518 2026-10-29T02:30:45.295Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-645f2a1e4b180b41 2026-10-29T02:30:39.911Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-64a93afaa1b3da03 2026-10-29T02:30:33.990Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-race-condition-was-addressed-with-improved-state-handling-cve-2025-43531-d904ab80088dcd48 2026-10-29T02:30:29.659Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-use-after-free-issue-was-addressed-with-improved-memory-management-cve-2025-5734d7825f037fa7 2026-10-29T02:30:22.434Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-memory-initialization-issue-was-addressed-with-improved-memory-handling-cve-923bb479188f9a27 2026-10-29T02:30:15.112Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-erlang-otp-ssh-sshsftp-modules-4cea485f92e6e795 2026-10-29T02:30:09.379Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-erlang-otp-ssh-sshsftp-modules-f5ddfede8fdbb1d3 2026-10-29T02:30:05.086Z weekly 0.7 https://radar.offseq.com/threat/uncontrolled-resource-consumption-vulnerability-in-erlang-otp-ssh-sshsftp-modules-allows-excessive-cve-e7820de5f698962c 2026-10-29T02:30:00.731Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-erlang-otp-ssh-sshsftp-cve-2025-0508f9b1d37daaaf 2026-10-29T02:29:53.826Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-certain-canvas-operations-could-have-lead-to-memory-corruption-cve-2025-49709-29f4a7da3f112aba 2026-10-29T02:29:23.960Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-an-integer-overflow-was-present-in-orderedhashtable-used-by-the-javascript-engine-cve-2025-3479ff475fc7407b 2026-10-29T02:29:19.077Z weekly 0.9 https://radar.offseq.com/threat/avahi-in-versions-up-to-and-including-09-rc5-the-simple-protocol-server-ignores-the-documented-client-675edfd3f23c03d5 2026-10-29T02:29:48.599Z weekly 0.7 https://radar.offseq.com/threat/zoneminder-v13634-is-vulnerable-to-command-injection-in-webviewsimagephp-cve-2025-65791-d75960c22722bafe 2026-10-29T02:29:13.953Z weekly 0.9 https://radar.offseq.com/threat/warning-users-of-6x-should-upgrade-to-624-or-later-as-the-fix-was-missed-in-previous-6x-releases-cve-d5f197ce40da6a25 2026-10-29T02:29:09.054Z weekly 0.8 https://radar.offseq.com/threat/python-authlib-in-versions-100-through-165-cache-backed-staterequest-token-storage-is-not-tied-to-the-a964e8b127188488 2026-10-29T02:29:04.533Z weekly 0.8 https://radar.offseq.com/threat/gnu-binutils-thru-246-readelf-contains-a-vulnerability-that-leads-to-an-invalid-pointer-free-when-c3375b1b223d223f 2026-10-29T02:29:41.234Z weekly 0.7 https://radar.offseq.com/threat/llamacpp-before-b5649-contains-a-heap-out-of-bounds-read-vulnerability-in-llamavocabimplprintinfo-that-3b1a6b1e329a2b84 2026-10-29T02:29:36.480Z weekly 0.7 https://radar.offseq.com/threat/when-a-user-explicitly-requested-thunderbird-to-decrypt-an-inline-openpgp-message-that-was-embedded-in-f89c97c323170e77 2026-10-29T02:29:33.075Z weekly 0.7 https://radar.offseq.com/threat/mitigation-bypass-in-the-dom-security-component-cve-2026-0877-51f9f30bf242f406 2026-10-29T02:29:00.331Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-incorrect-boundary-conditions-in-the-graphics-canvaswebgl-component-cve-e2dc2e24a8756dff 2026-10-29T02:28:55.335Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-incorrect-boundary-conditions-in-the-graphics-component-cve-2026-0879-b37182f7a4b0ec2e 2026-10-29T02:28:50.277Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-integer-overflow-in-the-graphics-component-cve-2026-0880-40e8e1141657ca5d 2026-10-29T02:28:44.419Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-use-after-free-in-the-ipc-component-cve-2026-0882-007b139083acfb03 2026-10-29T02:28:38.368Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-information-disclosure-in-the-networking-component-cve-2026-0883-5ef7e33884d62f59 2026-10-29T02:28:34.452Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-use-after-free-in-the-javascript-engine-component-cve-2026-0884-d928a0b1ecc7e222 2026-10-29T02:28:29.612Z weekly 0.9 https://radar.offseq.com/threat/use-after-free-in-the-javascript-gc-component-cve-2026-0885-4a07cf05471102e2 2026-10-29T02:28:23.621Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-graphics-component-cve-2026-0886-39102bdecc2a4f03 2026-10-29T02:28:17.470Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-clickjacking-issue-information-disclosure-in-the-pdf-viewer-component-cve-2026-0887-d7d99f3e7ccf7625 2026-10-29T02:28:12.427Z weekly 0.7 https://radar.offseq.com/threat/spoofing-issue-in-the-dom-copy-paste-and-drag-drop-component-cve-2026-0890-8ff280329213553b 2026-10-29T02:28:06.774Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-esr-1406-thunderbird-esr-1406-firefox-146-and-cve-2026-6d894f86ed9d1cd1 2026-10-29T02:28:01.373Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-firefox-146-and-thunderbird-146-cve-2026-0892-f4957eedcb1c792c 2026-10-29T02:27:58.018Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-malicious-scripts-that-interrupt-new-tab-page-loading-could-cause-desynchronization-between-1ccbeb159272cd90 2026-10-29T02:27:55.150Z weekly 0.7 https://radar.offseq.com/threat/heap-buffer-overflow-in-libvpx-cve-2026-2447-d22eb43bc6079fce 2026-10-29T02:27:50.299Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-malicious-scripts-could-cause-desynchronization-between-the-address-bar-and-web-content-before-e7648c9996eaa30e 2026-10-29T02:27:43.740Z weekly 0.9 https://radar.offseq.com/threat/openbabel-a-security-vulnerability-has-been-detected-in-open-babel-up-to-311-cve-2026-2704-cd19ef678b47af6d 2026-10-29T02:27:38.870Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-storage-indexeddb-component-cve-2026-2769-eac11d561b42075b 2026-10-29T02:27:33.670Z weekly 0.8 https://radar.offseq.com/threat/undefined-behavior-in-the-dom-core-html-component-cve-2026-2771-9edcd6ec72d2455e 2026-10-29T02:27:28.160Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-networking-jar-component-cve-2026-2779-7592a9d93bafa3a0 2026-10-29T02:27:22.354Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-netmonitor-component-cve-2026-2780-843d461d9e6c1866 2026-10-29T02:27:17.401Z weekly 0.9 https://radar.offseq.com/threat/integer-overflow-in-the-libraries-component-in-nss-cve-2026-2781-4d4555a487dc96be 2026-10-29T02:27:12.692Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-netmonitor-component-cve-2026-2782-c43362ba25404d25 2026-10-29T02:27:07.017Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-information-disclosure-due-to-jit-miscompilation-in-the-javascript-engine-jit-component-cve-da78d8f759d1f165 2026-10-29T02:27:02.720Z weekly 0.8 https://radar.offseq.com/threat/mitigation-bypass-in-the-dom-security-component-cve-2026-2784-6919563ba6e0a0b3 2026-10-29T02:26:57.855Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-invalid-pointer-in-the-javascript-engine-component-cve-2026-2785-da1ce40430d6e4e7 2026-10-29T02:26:52.979Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-use-after-free-in-the-javascript-engine-component-cve-2026-2786-58bd9c1a35625905 2026-10-29T02:26:47.749Z weekly 0.9 https://radar.offseq.com/threat/use-after-free-in-the-dom-window-and-location-component-cve-2026-2787-a727d0e86d62ad41 2026-10-29T02:26:42.669Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-audiovideo-gmp-component-cve-2026-2788-c813d3ad090d77b5 2026-10-29T02:16:06.939Z weekly 0.9 https://radar.offseq.com/threat/use-after-free-in-the-graphics-imagelib-component-cve-2026-2789-a240258dff862752 2026-10-29T02:16:01.852Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-same-origin-policy-bypass-in-the-networking-jar-component-cve-2026-2790-6dbfa019ed8aef89 2026-10-29T02:15:56.472Z weekly 0.9 https://radar.offseq.com/threat/mitigation-bypass-in-the-networking-cache-component-cve-2026-2791-c0c744f22fd73f35 2026-10-29T02:15:51.651Z weekly 0.9 https://radar.offseq.com/threat/use-after-free-in-the-dom-core-html-component-cve-2026-2798-b570659ce0f92e7f 2026-10-29T02:15:46.783Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-spoofing-issue-in-the-webauthn-component-in-firefox-for-android-cve-2026-2800-0ea2b36f578c7d19 2026-10-29T02:15:41.788Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-javascript-webassembly-component-cve-2026-2801-2220483822e2f7bf 2026-10-29T02:15:37.143Z weekly 0.8 https://radar.offseq.com/threat/race-condition-in-the-javascript-gc-component-cve-2026-2802-647aa286fb2de4d0 2026-10-29T02:15:33.024Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-information-disclosure-mitigation-bypass-in-the-settings-ui-component-cve-2026-2803-27b36b7089097d43 2026-10-29T02:15:28.503Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-javascript-webassembly-component-cve-2026-2804-18e714c62eea8594 2026-10-29T02:15:24.250Z weekly 0.7 https://radar.offseq.com/threat/invalid-pointer-in-the-dom-core-html-component-cve-2026-2805-d9163499ed74f794 2026-10-29T02:15:19.594Z weekly 0.9 https://radar.offseq.com/threat/uninitialized-memory-in-the-graphics-text-component-cve-2026-2806-5a1706d9a7c52c1e 2026-10-29T02:15:14.324Z weekly 0.9 https://radar.offseq.com/threat/node-lodash-the-unset-and-omit-functions-in-lodash-are-vulnerable-to-prototype-pollution-cve-2026-2950-0ee62ae99dd55802 2026-10-29T02:15:08.715Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-integer-overflow-in-angle-in-google-chrome-prior-to-14507632159-allowed-a-19f42a68ba81724f 2026-10-29T02:15:02.790Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-integer-overflow-in-skia-in-google-chrome-prior-to-14507632159-allowed-a-3cfce2c63bee5208 2026-10-29T02:14:57.898Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-heap-buffer-overflow-in-skia-in-google-chrome-prior-to-1460768071-allowed-a-7c16b8b1f8259a96 2026-10-29T02:14:41.499Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-inappropriate-implementation-in-angle-in-google-chrome-prior-to-14607680178-ec94e6b99a6f05bf 2026-10-29T02:14:51.916Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-esr-140101-and-thunderbird-15001-cve-2026-8092-37e58aa31a51a2d5 2026-10-29T02:14:35.885Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-15001-cve-2026-8093-2d60b90c882af77b 2026-10-29T02:14:32.459Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-150-cve-2026-8973-ed484976993eaf63 2026-10-29T02:14:27.785Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-14010-and-thunderbird-150-cve-2026-8974-c672e5465f14e0a5 2026-10-29T02:14:23.482Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-14010-and-thunderbird-150-cve-2026-8975-d55f38b843b75ca0 2026-10-29T02:14:18.943Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12290-c49697069c78dce6 2026-10-29T02:14:13.920Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12298-7eb98db3ca11a9f4 2026-10-29T02:14:08.675Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12300-612b038634417551 2026-10-29T02:14:46.871Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12301-cb6cd7fbcf3737d3 2026-10-29T02:13:39.398Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12305-7b2a824542f7f07e 2026-10-29T02:13:34.651Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12306-41f8469674d2e529 2026-10-29T02:13:29.988Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12307-285499405d59c757 2026-10-29T02:13:24.544Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12308-ee22136486685d7c 2026-10-29T02:13:18.912Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12309-b0573b3a8221c6f3 2026-10-29T02:13:13.197Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12310-61cd7dec537e35a9 2026-10-29T02:13:08.208Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12312-0bb097ca24cc4379 2026-10-29T02:13:02.843Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12314-55e843e3f12cdf4c 2026-10-29T02:12:57.744Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bug-fixed-in-thunderbird-152-cve-2026-12317-9559acf60658bea2 2026-10-29T02:12:51.839Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-esr-14012-and-thunderbird-152-cve-2026-16360-1dfd226f5238d8a2 2026-10-29T02:12:46.780Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-152-cve-2026-16411-eeafb1cea8f6ce9e 2026-10-29T02:12:43.811Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-memory-safety-bugs-present-in-thunderbird-esr-14012-and-thunderbird-152-cve-2026-16412-b99f621702f7ca21 2026-10-29T02:12:17.738Z weekly 0.9 https://radar.offseq.com/threat/qtbase-opensource-src-gles-an-attacker-able-to-supply-a-crafted-xml-document-to-an-application-using-5706c7cb53815492 2026-10-29T02:12:12.201Z weekly 0.8 https://radar.offseq.com/threat/jetty9-in-eclipse-jetty-across-various-versions-of-jetty-security-and-jetty-een-security-and-jetty-een-07d43a5a9a7f88e4 2026-10-29T02:12:39.197Z weekly 0.7 https://radar.offseq.com/threat/jetty9-in-eclipse-jetty-across-various-versions-of-jetty-server-and-jetty-proxy-the-host-f5edec02804f6aa1 2026-10-29T02:12:07.433Z weekly 0.8 https://radar.offseq.com/threat/in-eclipse-jetty-across-various-versions-of-jetty-annotations-and-jetty-een-annotations-the-jakarta-f69883d075399316 2026-10-29T02:12:03.665Z weekly 0.8 https://radar.offseq.com/threat/jetty9-in-eclipse-jetty-across-various-versions-of-jetty-security-and-jetty-een-security-two-or-more-68a84fe2f2add8e0 2026-10-29T02:12:35.149Z weekly 0.7 https://radar.offseq.com/threat/golang-github-hashicorp-go-getter-hashicorp-go-getter-versions-before-1810-and-go-getterv2-versions-560c0b5251a1d026 2026-10-29T02:12:31.050Z weekly 0.7 https://radar.offseq.com/threat/zephyrs-openthread-integration-defined-configopenthreadjoinerpskd-with-default-j01nme-in-fc981bc90ed8063c 2026-10-29T02:12:00.359Z weekly 0.8 https://radar.offseq.com/threat/zephyr-the-ipv6-stack-derived-the-long-lived-secret-key-used-to-compute-rfc-7217-stable-interface-24c7678a50bb745b 2026-10-29T02:12:27.111Z weekly 0.7 https://radar.offseq.com/threat/jetty9-eclipse-jettys-sessionauthentication-retains-authentication-credentials-in-a-serializable-cve-786883909c19649e 2026-10-29T02:12:22.115Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2026-20608-c8579bcca47de377 2026-10-29T02:11:55.284Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2026-20635-de40e7f4c876bcbe 2026-10-29T02:11:49.492Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2026-20636-7c3595620ffa79e2 2026-10-29T02:11:43.659Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2026-20644-1f48c06cc1b74a86 2026-10-29T02:01:14.652Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-the-issue-was-addressed-with-improved-memory-handling-cve-2026-20652-0d828a6036f1b0dc 2026-10-29T01:59:05.145Z weekly 0.8 https://radar.offseq.com/threat/qtwebkit-opensource-src-this-issue-was-addressed-through-improved-state-management-cve-2026-20676-1ac15100520e4481 2026-10-29T02:01:08.391Z weekly 0.7 https://radar.offseq.com/threat/relative-path-traversal-improper-isolation-or-compartmentalization-vulnerability-in-erlang-otp-40ec04dc3d7c1395 2026-10-29T02:01:01.481Z weekly 0.7 https://radar.offseq.com/threat/authentication-bypass-by-alternate-name-vulnerability-in-apache-shiro-cve-2026-23903-85c275a738959859 2026-10-29T02:00:49.938Z weekly 0.7 https://radar.offseq.com/threat/in-versions-09rc2-and-below-avahi-daemon-can-be-crashed-via-a-segmentation-fault-by-sending-an-d2add293a931b103 2026-10-29T02:00:45.976Z weekly 0.7 https://radar.offseq.com/threat/missing-authentication-for-critical-function-cwe-306-vulnerability-in-apache-artemis-apache-cve-2026-58649de2d30eb75b 2026-10-29T01:58:59.705Z weekly 0.9 https://radar.offseq.com/threat/ckeditor-5-is-a-modern-javascript-rich-text-editor-with-an-mvc-architecture-cve-2026-28343-6c1839fb35cddc99 2026-10-29T02:00:35.632Z weekly 0.7 https://radar.offseq.com/threat/cacti-prior-to-version-1231-the-prior-blocklist-nr-omitted-single-quote-cve-2026-39902-54cd8b8953cbdbc2 2026-10-29T01:58:54.211Z weekly 0.8 https://radar.offseq.com/threat/improper-following-of-a-certificates-chain-of-trust-vulnerability-in-erlang-otp-publickey-pubkeycert-52a186567b6d4df2 2026-10-29T01:58:49.090Z weekly 0.8 https://radar.offseq.com/threat/llamacpp-builds-b4882-before-b8487-contain-an-out-of-bounds-read-vulnerability-in-the-recurrent-memory-77bfd82482995392 2026-10-29T02:00:32.442Z weekly 0.7 https://radar.offseq.com/threat/qtwebkit-opensource-src-a-content-security-policy-bypass-was-addressed-with-improved-enforcement-in-9b13892cc773107d 2026-10-29T01:58:43.077Z weekly 0.8 https://radar.offseq.com/threat/dcmtk-uncontrolled-mutual-recursion-between-dcmxmlparsehelperparsedataset-and-9dfc1d1de0de8229 2026-10-29T02:00:29.144Z weekly 0.7 https://radar.offseq.com/threat/a-global-out-of-bounds-read-in-the-huffman-decoder-of-the-bundled-ijg-jpeg-libraries-dcmjpeglibijg8-e5101959c4e36af6 2026-10-29T02:00:24.103Z weekly 0.7 https://radar.offseq.com/threat/from-version-1227-to-before-version-1231-cacti-contains-an-authenticated-stored-second-order-sql-b2d7374f90729e39 2026-10-29T02:00:18.190Z weekly 0.7 https://radar.offseq.com/threat/sensitive-data-exposure-vulnerability-in-erlang-otp-inets-httpcresponse-module-allows-retrieve-cve-4e47bd261d3479a6 2026-10-29T02:00:14.881Z weekly 0.7 https://radar.offseq.com/threat/prior-to-version-1231-a-user-enumeration-vulnerability-allows-an-attacker-to-identify-valid-cve-2026-f7424663a7240ac9 2026-10-29T01:58:26.881Z weekly 0.7 https://radar.offseq.com/threat/in-util-linux-239-through-2414-and-242-through-2421-the-suid-mount-utilitys-hookownerc-post-mount-hook-1dfaf0c47cd3421f 2026-10-29T01:58:22.434Z weekly 0.8 https://radar.offseq.com/threat/ldap-account-manager-lam-is-a-webfrontend-for-managing-entries-eg-cve-2026-55167-66424bcfd30382dd 2026-10-29T01:58:17.376Z weekly 0.7 https://radar.offseq.com/threat/libssh2-1111-fixed-in-commit-97acf3d-contains-an-out-of-bounds-write-vulnerability-in-de525bcf36905e25 2026-10-29T01:57:14.261Z weekly 0.8 https://radar.offseq.com/threat/cups-prior-to-2420-the-backendippc-quotestring-function-preserves-carriage-return-and-line-feed-7748ead39128ab3a 2026-10-29T01:58:13.635Z weekly 0.7 https://radar.offseq.com/threat/cups-filters-prior-to-2420-the-cupsdcreatejob-option-string-builder-in-schedulerjobc-maps-attacker-0fdd23d8e470a57c 2026-10-29T01:58:09.330Z weekly 0.7 https://radar.offseq.com/threat/cups-prior-to-2420-copymodel-in-schedulerippc-creates-a-predictable-tempdirconnection-numberppd-path-in-3fdcbec9d4370e1b 2026-10-29T01:58:04.339Z weekly 0.7 https://radar.offseq.com/threat/xdg-desktop-portal-is-a-desktop-integration-portal-cve-2026-55888-b998a5fc09f92e07 2026-10-29T01:57:09.052Z weekly 0.8 https://radar.offseq.com/threat/xdg-desktop-portal-is-a-desktop-integration-portal-cve-2026-55889-42c9d07b2adfd915 2026-10-29T01:57:04.561Z weekly 0.8 https://radar.offseq.com/threat/apache2-out-of-bounds-write-vulnerability-in-apache-http-servers-modproxyhtml-with-crafted-http-cve-9fc36661785153c1 2026-10-29T01:56:59.855Z weekly 0.8 https://radar.offseq.com/threat/asterisk-is-an-open-source-private-branch-exchange-and-telephony-toolkit-cve-2026-57184-241cc0bcaf0f02ef 2026-10-29T01:57:59.046Z weekly 0.7 https://radar.offseq.com/threat/asterisk-is-an-open-source-private-branch-exchange-and-telephony-toolkit-cve-2026-57187-186da3682d283be3 2026-10-29T01:56:55.121Z weekly 0.8 https://radar.offseq.com/threat/asterisk-is-an-open-source-private-branch-exchange-and-telephony-toolkit-cve-2026-57193-30e969776995e6dd 2026-10-29T01:57:55.429Z weekly 0.7 https://radar.offseq.com/threat/asterisk-is-an-open-source-private-branch-exchange-and-telephony-toolkit-cve-2026-57196-d4d805f24950ac8a 2026-10-29T01:57:51.578Z weekly 0.7 https://radar.offseq.com/threat/cups-prior-to-2420-copybanner-in-schedulerippc-uses-the-attacker-controlled-ipp-attributes-natural-efc81edb0914f2c9 2026-10-29T01:57:47.312Z weekly 0.7 https://radar.offseq.com/threat/social-auth-core-python-social-auth-is-a-social-authenticationregistration-mechanism-cve-2026-62322-ac1469a72870755d 2026-10-29T01:57:42.736Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-gimp-an-integer-overflow-occurs-in-the-file-pvr-plug-in-when-calculating-memory-a42badaf92c1e446 2026-10-29T01:56:50.953Z weekly 0.8 https://radar.offseq.com/threat/rust-ammonia-prior-to-332-402-and-413-applications-that-explicitly-allow-the-math-tag-annotation-xml-e0969d5dfb58c787 2026-10-29T01:57:38.825Z weekly 0.7 https://radar.offseq.com/threat/mongoose-prior-to-723-ppphandleipv6cp-in-srcl2pppc-trusts-the-16-bit-ipv6cp-len-field-cve-2026-63626-3b92008ed69de432 2026-10-29T01:56:46.087Z weekly 0.8 https://radar.offseq.com/threat/the-pure-erlang-aes-gcm-fallback-in-josejwaaes-derives-the-number-of-verified-authentication-tag-cve-4af85eb80f1a12e8 2026-10-29T01:57:33.729Z weekly 0.7 https://radar.offseq.com/threat/the-pure-erlang-rsaes-pkcs1-v15-decryption-in-the-josejwapkcs1-module-is-a-bleichenbacher-padding-cve-b2a4679dd48129d2 2026-10-29T01:57:28.896Z weekly 0.7 https://radar.offseq.com/threat/improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-potatosalad-jose-f3f653f9038a02f8 2026-10-29T01:57:24.670Z weekly 0.7 https://radar.offseq.com/threat/josejwksharedsecret2-exposed-in-elixir-as-josejwksharedsecret2-derives-an-ecdh-shared-cve-2026-65628-4d9392c3180730f9 2026-10-29T01:57:21.411Z weekly 0.7 https://radar.offseq.com/threat/use-of-password-hash-with-insufficient-computational-effort-in-the-jose-library-allows-an-attacker-who-c2b22f8b633cf4d7 2026-10-29T01:56:42.084Z weekly 0.8 https://radar.offseq.com/threat/observable-timing-discrepancy-vulnerability-in-potatosalad-jose-allows-recovery-of-a-long-term-x25519-c74e13788a94e1fc 2026-10-29T01:57:17.632Z weekly 0.7 https://radar.offseq.com/threat/inefficient-algorithmic-complexity-in-erlang-jose-allows-an-unauthenticated-remote-attacker-to-cause-a-83139c91921b7e4e 2026-10-29T01:44:54.542Z weekly 0.7 https://radar.offseq.com/threat/the-jose-library-accepts-ecdsa-es256-es256k-es384-and-es512-jws-signatures-of-a-non-canonical-cve-2026-178824c7761e19ee 2026-10-29T01:44:50.705Z weekly 0.7 https://radar.offseq.com/threat/rabbitmq-server-rabbitmq-is-a-messaging-and-streaming-broker-cve-2026-67414-54dd78edf36a6d9d 2026-10-29T01:44:47.154Z weekly 0.7 https://radar.offseq.com/threat/rabbitmq-server-rabbitmq-is-a-messaging-and-streaming-broker-cve-2026-67416-2a33ad637cdd1c37 2026-10-29T01:44:42.893Z weekly 0.7 https://radar.offseq.com/threat/rabbitmq-server-rabbitmq-is-a-messaging-and-streaming-broker-cve-2026-67418-3fd094b4a66abd61 2026-10-29T01:44:37.699Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-out-of-bounds-write-in-net-framework-allows-an-unauthorized-attacker-to-execute-code-over-a-55482d6829e20680 2026-10-29T01:44:33.257Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-deserialization-of-untrusted-data-in-net-framework-allows-an-unauthorized-attacker-to-cve-2026-1c0d880b81ac12c7 2026-10-29T01:44:30.023Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-in-net-cve-2026-73f180501334b2d9 2026-10-29T01:44:27.067Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-a-denial-of-service-vulnerability-exists-when-microsoft-common-object-runtime-library-cve-2026-baad120acd67560e 2026-10-29T01:44:24.315Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-improper-link-resolution-before-file-access-link-following-in-net-allows-an-authorized-cve-1835a17fc6e38b41 2026-10-29T01:44:21.512Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-improperly-implemented-security-check-for-standard-in-net-allows-an-unauthorized-attacker-cve-69ba43fa977ba1b3 2026-10-29T01:44:18.713Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-improper-link-resolution-before-file-access-link-following-in-net-allows-an-authorized-cve-47bb2d8e7642b9c9 2026-10-29T01:44:16.060Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-out-of-bounds-write-in-net-allows-an-unauthorized-attacker-to-execute-code-over-a-network-cve-3c77c086d0410bc1 2026-10-29T01:44:12.750Z weekly 0.8 https://radar.offseq.com/threat/mongoose-prior-to-723-the-built-in-tls-stack-selected-by-mgtlsbuiltin-in-srctlsbuiltinc-accepts-a-tls-ee43ffede1432f27 2026-10-29T01:43:54.103Z weekly 0.8 https://radar.offseq.com/threat/mongoose-prior-to-723-the-built-in-tls-certificate-parser-selected-by-mgtlsbuiltin-fails-to-verify-9482ff33cecf58b9 2026-10-29T01:43:50.832Z weekly 0.8 https://radar.offseq.com/threat/mongoose-prior-to-723-the-built-in-tcpip-stack-enabled-by-mgenabletcpip-in-srcnetbuiltinc-does-not-061085092753a8e5 2026-10-29T01:43:47.630Z weekly 0.8 https://radar.offseq.com/threat/tomcat6-improper-check-for-certificate-revocation-vulnerability-in-apache-tomcat-cve-2026-73581-dd91c58081f4ddbe 2026-10-29T01:44:09.973Z weekly 0.7 https://radar.offseq.com/threat/tomcat6-not-failing-securely-failing-open-vulnerability-in-apache-tomcat-cve-2026-74048-f6aa37c18559b25c 2026-10-29T01:44:06.205Z weekly 0.7 https://radar.offseq.com/threat/tomcat6-execution-after-redirect-ear-vulnerability-in-apache-tomcat-cve-2026-74049-0e4ac0beddc52353 2026-10-29T01:44:01.937Z weekly 0.7 https://radar.offseq.com/threat/graphql-core-is-a-python-port-of-the-graphqljs-reference-implementation-cve-2026-75507-1df8a9e3d5e1dd98 2026-10-29T01:43:44.139Z weekly 0.8 https://radar.offseq.com/threat/graphql-core-is-a-python-port-of-the-graphqljs-reference-implementation-cve-2026-75508-f97f3eb1442460b7 2026-10-29T01:43:40.730Z weekly 0.8 https://radar.offseq.com/threat/in-eclipse-jetty-trypathshandler-and-tryfilesfilter-can-be-configured-to-forward-requests-to-template-1923cc9703490582 2026-10-29T01:43:57.644Z weekly 0.7 https://radar.offseq.com/threat/in-eclipse-jetty-httpclient-may-receive-a-redirect-of-the-form-secureevil-if-an-attacker-is-able-to-3cd403cdbc5e7e30 2026-10-29T01:43:37.226Z weekly 0.8 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77405-6e00cc7bc028b681 2026-10-29T01:43:33.884Z weekly 0.9 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77406-df1062910f4e8d6b 2026-10-29T01:43:30.087Z weekly 0.8 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77407-47f663b34c0d32f9 2026-10-29T01:43:25.709Z weekly 0.8 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77408-5ebe0f186b6d17e0 2026-10-29T01:43:22.122Z weekly 0.9 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77409-d89789c5790d0ed0 2026-10-29T01:43:18.497Z weekly 0.8 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77410-0b51758ef3bf269c 2026-10-29T01:43:14.859Z weekly 0.8 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77411-bc6ac5bf15654458 2026-10-29T01:42:11.851Z weekly 0.9 https://radar.offseq.com/threat/golang-github-rabbitmq-amqp091-go-rabbitmq-amqp091-go-is-a-go-amqp-091-client-cve-2026-77412-9e025500e6a78b72 2026-10-29T01:42:08.282Z weekly 0.8 https://radar.offseq.com/threat/when-jettys-httpclient-make-a-request-to-a-server-through-a-forward-proxy-the-server-may-reply-with-3baea5349d7fa72b 2026-10-29T01:42:04.511Z weekly 0.8 https://radar.offseq.com/threat/an-issue-in-matomo-v5112-allows-a-remote-attacker-to-obtain-sensitive-information-via-the-cve-2026-809659736015a23f 2026-10-29T01:43:11.700Z weekly 0.7 https://radar.offseq.com/threat/during-xenstore-live-update-the-state-record-for-a-xenstore-watch-with-specified-watch-depth-is-cve-85c67c1e4156db0a 2026-10-29T01:43:08.126Z weekly 0.7 https://radar.offseq.com/threat/golang-github-containers-storage-a-flaw-was-found-in-the-containersstorage-library-cve-2026-79699-98235fe30e1ab9da 2026-10-29T01:43:03.732Z weekly 0.7 https://radar.offseq.com/threat/golang-github-containers-buildah-a-flaw-was-found-in-the-buildahcopier-go-package-cve-2026-79705-0623e77ca333724c 2026-10-29T01:42:58.523Z weekly 0.7 https://radar.offseq.com/threat/cakephp-prior-to-4512-465-519-5214-and-537-functionsbuildercast-functionsbuilderextract-9963d561eb072f53 2026-10-29T01:42:01.448Z weekly 0.9 https://radar.offseq.com/threat/zephyr-the-wireguard-vpn-service-in-subsysnetlibwireguardwgc-updated-the-peer-endpoint-from-a-cve-2026-70f241676af4b0ba 2026-10-29T01:41:57.477Z weekly 0.8 https://radar.offseq.com/threat/zephyr-the-rtio-streaming-completion-callback-adxl345processfifosamplescb-in-ece92983f7cb7608 2026-10-29T01:42:53.206Z weekly 0.7 https://radar.offseq.com/threat/zephyr-the-arm64-mmu-backend-invalidates-a-single-virtual-address-from-the-tlb-with-invalidatetlbpage-c3ec867e4942adf7 2026-10-29T01:41:51.911Z weekly 0.8 https://radar.offseq.com/threat/zephyr-the-dhcpv4-client-in-subsysnetlibdhcpv4dhcpv4c-maintained-its-transaction-identifier-3e39f7649d187b25 2026-10-29T01:42:49.080Z weekly 0.7 https://radar.offseq.com/threat/zephyr-the-dns-stub-resolver-in-subsysnetlibdnsresolvec-binds-one-udp-socket-per-configured-server-767788fa73619ecd 2026-10-29T01:42:43.523Z weekly 0.7 https://radar.offseq.com/threat/zephyr-the-bluetooth-hci-usb-transport-class-of-the-new-usb-device-stack-subsysusbdevicenextclassbthcic-49cd0aec518494af 2026-10-29T01:41:46.682Z weekly 0.8 https://radar.offseq.com/threat/tomcat6-time-of-check-time-of-use-toctou-race-condition-vulnerability-in-apache-tomcat-when-creating-971d4e51c6c91e25 2026-10-29T01:42:37.892Z weekly 0.7 https://radar.offseq.com/threat/zephyr-the-object-transfer-service-server-builds-its-object-action-control-point-oacp-response-f0724cac0072fd36 2026-10-29T01:41:42.329Z weekly 0.8 https://radar.offseq.com/threat/zephyr-the-bluetooth-host-pre-allocates-a-btconn-object-a-reservation-from-the-fixed-aclconns-pool-for-b92c534b2007c0bc 2026-10-29T01:42:34.338Z weekly 0.7 https://radar.offseq.com/threat/a-heap-based-buffer-overflow-was-found-in-corosyncs-totem-process-group-totempg-message-reassembly-cve-697408cf284e6068 2026-10-29T01:29:51.624Z weekly 0.8 https://radar.offseq.com/threat/erlang-hex-improper-neutralization-of-escape-meta-or-control-sequences-vulnerability-in-hexpm-hex-85ff036b2cc8611a 2026-10-29T01:42:29.336Z weekly 0.7 https://radar.offseq.com/threat/zephyr-bthfphfconnect-in-subsysbluetoothhostclassichfphfc-allocates-the-per-connection-hfp-hands-free-532414388a729bcd 2026-10-29T01:42:25.613Z weekly 0.7 https://radar.offseq.com/threat/zephyr-in-the-bluetooth-classic-hands-free-profile-audio-gateway-role-hfpagcreate-in-634385b5669144d8 2026-10-29T01:42:21.432Z weekly 0.7 https://radar.offseq.com/threat/zephyr-the-espressif-aes-driver-driverscryptocryptoesp32aesc-advertises-a-multi-session-cipher-api-it-aa9b8312b7f488a8 2026-10-29T01:42:16.851Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-deserialization-of-untrusted-data-in-net-allows-an-unauthorized-attacker-to-execute-code-cve-9f41a8c59cd5cc67 2026-10-29T01:29:46.681Z weekly 0.8 https://radar.offseq.com/threat/prior-to-26100rc1-twistednamesdnsdnsdatagramprotocol-accepts-a-udp-dns-response-for-a-pending-query-56cbd6ab3665c74c 2026-10-29T01:31:26.879Z weekly 0.7 https://radar.offseq.com/threat/gitlab-has-remediated-an-issue-in-gitlab-ceee-affecting-all-versions-from-1711-before-1928-193-before-c35837f046e46cc9 2026-10-29T01:31:21.464Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-integer-overflow-or-wraparound-in-net-framework-allows-an-unauthorized-attacker-to-elevate-cve-9ad9b2db1c51138a 2026-10-29T01:29:43.956Z weekly 0.8 https://radar.offseq.com/threat/golang-oras-oras-go-prior-to-262-contentfilestore-extraction-of-oci-layers-marked-with-12d18a6e81d4fab7 2026-10-29T01:29:41.180Z weekly 0.8 https://radar.offseq.com/threat/golang-oras-oras-go-prior-to-262-the-parselink-function-in-registryremoteutilsgo-accepts-an-absolute-e1b039cfaa32ed3a 2026-10-29T01:31:18.167Z weekly 0.7 https://radar.offseq.com/threat/docker-registry-distribution-is-a-toolkit-to-pack-ship-store-and-deliver-container-content-cve-2026-b70f683879f88919 2026-10-29T01:31:13.817Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-use-after-free-in-microsoft-quic-allows-an-unauthorized-attacker-to-disclose-information-cve-89e646909c2250b2 2026-10-29T01:31:08.927Z weekly 0.7 https://radar.offseq.com/threat/a-security-flaw-has-been-discovered-in-mwiede-jsch-up-to-2285-cve-2026-86231-ab77a37aa47cb6dc 2026-10-29T01:31:06.239Z weekly 0.7 https://radar.offseq.com/threat/setting-curloptawssigv4-to-null-but-does-not-disable-sigv4-authentication-contrary-to-expectations-cve-400cee890abeabe3 2026-10-29T01:31:02.724Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-in-the-curl-command-line-tools-logic-makes-it-only-set-ssh-host-verification-options-when-ad709dec4f631ac9 2026-10-29T01:30:56.384Z weekly 0.7 https://radar.offseq.com/threat/an-http-proxy-can-trick-libcurl-into-sending-the-origins-credentials-basic-password-or-a-00badfe57b4687a6 2026-10-29T01:30:50.878Z weekly 0.7 https://radar.offseq.com/threat/node-ajv-fast-uri-is-a-dependency-free-rfc-3986-uri-parser-for-nodejs-used-by-fastify-and-ajv-cve-2026-e11064021089c8d1 2026-10-29T01:30:43.579Z weekly 0.7 https://radar.offseq.com/threat/gst-plugins-base10-a-flaw-was-found-in-gst-plugins-base-cve-2026-86476-f962566b9fa9f7b9 2026-10-29T01:29:37.864Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-cve-2026-86561-996018c69486cf93 2026-10-29T01:30:38.374Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-cve-2026-86562-1c5ee519dab373cb 2026-10-29T01:29:29.398Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-cve-2026-86563-6540601b2fa7084a 2026-10-29T01:29:22.886Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-cve-2026-86565-7c90b1bbcb275712 2026-10-29T01:29:16.201Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-cve-2026-86566-ed156e1ac827546e 2026-10-29T01:30:31.297Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-cve-2026-86567-351f5cc3a7f12d5a 2026-10-29T01:27:16.190Z weekly 0.8 https://radar.offseq.com/threat/node-ajv-fast-uri-is-a-dependency-free-rfc-3986-uri-parser-for-nodejs-used-by-fastify-and-ajv-cve-2026-db931e0e062e5366 2026-10-29T01:30:22.831Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-vhost-crypto-cve-2026-86845-03220e16265f39ae 2026-10-29T01:30:18.351Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-vhost-crypto-cve-2026-86846-e30c79fd696a60d6 2026-10-29T01:30:11.804Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-vhost-crypto-cve-2026-86847-12f4eecf39bc7d56 2026-10-29T01:30:04.564Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-vhost-crypto-cve-2026-86848-f8f84b85e429c579 2026-10-29T01:27:10.115Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-vhost-crypto-cve-2026-86849-f1e8154e732cee21 2026-10-29T01:29:58.208Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-the-dpdk-nfp-vdpa-driver-cve-2026-86856-97db5716007ab8fa 2026-10-29T01:29:07.976Z weekly 0.7 https://radar.offseq.com/threat/node-undici-in-versions-421-through-6290-700-through-7300-and-800-through-8121-the-client-process-2c4a846497df0e22 2026-10-29T01:27:03.369Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-deserialization-of-untrusted-data-in-net-allows-an-unauthorized-attacker-to-execute-code-cve-0c99305b025a54c0 2026-10-29T01:26:59.023Z weekly 0.8 https://radar.offseq.com/threat/enabling-curloptcrlf-causes-curl-to-advertise-the-raw-input-byte-count-in-the-imap-append-n-cve-2026-1e7c15696d5fa253 2026-10-29T01:29:01.512Z weekly 0.7 https://radar.offseq.com/threat/tomcat6-incomplete-cleanup-vulnerability-in-apache-tomcat-allowed-an-trailer-information-from-a-cve-b99260f2f97f4e66 2026-10-29T01:28:55.391Z weekly 0.7 https://radar.offseq.com/threat/gnutls26-incomplete-x509-implementation-in-gnutls-v3813-allows-attackers-controlling-a-subordinate-b5cea8428de12895 2026-10-29T01:28:52.067Z weekly 0.7 https://radar.offseq.com/threat/python-markdown2-a-regular-expression-denial-of-service-redos-in-the-markdown2-cve-2026-88753-06ddb808e1517e14 2026-10-29T01:26:56.194Z weekly 0.8 https://radar.offseq.com/threat/xorg-server-a-double-free-in-xkb-setgeometryin-xorg-x-server-before-21125-and-x-wayland-before-24114-8e673a960989a05e 2026-10-29T01:26:52.685Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-busybox-httpds-reverse-proxy-feature-cve-2026-88829-b2a62c9137a8d84e 2026-10-29T01:26:47.440Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-busyboxs-udhcpc-dhcp-client-cve-2026-88833-227aba0bc23d5bf9 2026-10-29T01:28:47.571Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-busyboxs-httpd-web-server-cve-2026-88834-3e7758584cce3198 2026-10-29T01:28:40.696Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-busyboxs-mount-utility-cve-2026-88838-3d75d90bc436b511 2026-10-29T01:28:34.197Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-busybox-dpkg-cve-2026-88842-73a2ece57a9950d8 2026-10-29T01:28:26.892Z weekly 0.7 https://radar.offseq.com/threat/golang-github-hashicorp-go-getter-the-go-getter-library-up-to-versions-188-and-223-is-vulnerable-to-a-73ef1a31c3031d47 2026-10-29T01:28:20.026Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-parted-a-heap-based-buffer-overflow-can-occur-when-processing-a-specially-crafted-4d2404160c665502 2026-10-29T01:28:17.154Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-parted-a-heap-based-buffer-overflow-exists-in-libparteds-file-system-resizing-cve-c11de47a9110552e 2026-10-29T01:28:13.749Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-busyboxs-dpkg-deb-archive-extraction-cve-2026-90954-ad476a458dfdb187 2026-10-29T01:12:24.400Z weekly 0.8 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-5edca3d79ed2d16f 2026-10-29T01:12:15.831Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-c65001343437025b 2026-10-29T01:12:10.500Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-98b545239b6673f6 2026-10-29T01:12:05.160Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-470fcc1ba0b5e76e 2026-10-29T01:12:00.130Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-4445b15a19d51288 2026-10-29T01:11:54.797Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-3acf391a104401da 2026-10-29T01:11:49.085Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-a87108efc12ad2db 2026-10-29T01:11:43.707Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-fd2b81dcd491436b 2026-10-29T00:59:42.713Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-dcc7b2e3a195fc95 2026-10-29T00:59:38.272Z weekly 0.9 https://radar.offseq.com/threat/hp-has-identified-and-remediated-multiple-externally-reported-vulnerabilities-within-hplip-cve-2026-09af6e79fffb648e 2026-10-29T00:59:33.038Z weekly 0.9 https://radar.offseq.com/threat/php70-phpopensslmatcheswildcardname-in-extopensslxpsslc-underflows-the-length-argument-passed-to-memchr-04d4d1cbdb8a1f88 2026-10-29T01:28:10.217Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-gnome-shell-cve-2026-91786-8f1d65532281673c 2026-10-29T01:27:59.430Z weekly 0.7 https://radar.offseq.com/threat/mariadb-100-from-1061-until-10628-101119-11413-1189-1233-and-1302-the-mysql50-bypass-prefix-is-9b51ad3e9d0c30ed 2026-10-29T00:59:28.241Z weekly 0.9 https://radar.offseq.com/threat/apache-arrow-pass-through-of-unvalidated-kms-urls-to-kms-clients-in-apache-c-parquet-and-pyarrow-cve-88befb7cefce6d0a 2026-10-29T01:27:54.932Z weekly 0.7 https://radar.offseq.com/threat/when-writing-a-long-cookie-name-and-value-to-a-netscape-cookie-jar-a-remote-http-server-can-make-curl-1da989ce7c8bb558 2026-10-29T01:27:50.294Z weekly 0.7 https://radar.offseq.com/threat/when-an-ftp-wildcard-list-operation-fails-libcurl-omits-the-restoration-path-meant-for-successful-52bf97e97716b3ea 2026-10-29T01:27:35.405Z weekly 0.7 https://radar.offseq.com/threat/node-nodemailer-nodemailer-npm-package-nodemailer-versions-910-and-earlier-do-not-honor-the-f0cbea68e3e6f9b3 2026-10-29T01:27:20.178Z weekly 0.7 https://radar.offseq.com/threat/node-nodemailer-nodemailer-before-910-contains-a-quadratic-time-complexity-vulnerability-in-the-06cf82dc5e7e64fd 2026-10-29T00:59:21.896Z weekly 0.8 https://radar.offseq.com/threat/node-nodemailer-nodemailer-versions-6916-and-910-mis-parse-rfc-5322-comments-in-email-addresses-in-26f34c9516247669 2026-10-29T01:13:42.502Z weekly 0.7 https://radar.offseq.com/threat/node-nodemailer-nodemailer-before-910-fails-to-apply-uts-46-normalization-when-encoding-international-f2520ec84b95524e 2026-10-29T01:13:38.761Z weekly 0.7 https://radar.offseq.com/threat/the-jaxb-factory-methods-historically-relied-solely-on-featuresecureprocessing-to-prevent-xml-cve-2026-af40d18e3866cf29 2026-10-29T00:59:17.887Z weekly 0.8 https://radar.offseq.com/threat/python-ansi2html-ansi2html-versions-170a0-through-193-contain-a-cross-site-scripting-vulnerability-in-9d5342f1fc6e36c0 2026-10-29T01:13:34.724Z weekly 0.7 https://radar.offseq.com/threat/tomcat6-incomplete-cleanup-vulnerability-in-apache-tomcat-could-cause-tls-13-connections-to-fail-cve-ace3967c6df36e3b 2026-10-29T01:13:31.246Z weekly 0.7 https://radar.offseq.com/threat/otrs2-in-znuny-through-736-an-attacker-can-bypass-specific-standard-login-procedures-and-gain-b2b9b6a93f3080c3 2026-10-29T00:59:14.179Z weekly 0.9 https://radar.offseq.com/threat/otrs2-znuny-through-736-constructs-a-ticket-search-database-query-by-directly-concatenating-cve-2026-2848972b63b0ac4a 2026-10-29T00:59:10.280Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-the-dpdk-vhost-library-cve-2026-93683-a058310b64078338 2026-10-29T01:13:27.384Z weekly 0.7 https://radar.offseq.com/threat/rex-versions-through-1161-for-perl-accept-an-unknown-ssh-host-key-for-remote-rsync-transfers-cve-2026-9b9b781544e5cf28 2026-10-29T01:13:19.400Z weekly 0.7 https://radar.offseq.com/threat/improper-validation-of-consistency-within-input-vulnerability-in-erlang-otp-ssl-tlshandshake13-7e6fd5faeddbe9d5 2026-10-29T00:57:08.835Z weekly 0.8 https://radar.offseq.com/threat/libcurl-could-accidentally-return-a-url-for-curleasygetinfos-curlinfoeffectiveurl-option-containing-c513f7fff6fc3dd1 2026-10-29T01:13:15.539Z weekly 0.7 https://radar.offseq.com/threat/libwebsockets-contains-an-out-of-bounds-read-vulnerability-in-the-lejp-incremental-parser-in-cve-2026-e5be485ce2ae69be 2026-10-29T00:57:04.614Z weekly 0.8 https://radar.offseq.com/threat/an-issue-in-libming-through-048-allows-a-remote-attacker-to-cause-a-denial-of-service-via-the-cve-2026-8002b9cfaec84c04 2026-10-29T00:56:59.737Z weekly 0.8 https://radar.offseq.com/threat/libming-through-048-contains-a-heap-buffer-overflow-in-rreadc-in-srcblocksfromswfc-cve-2026-95125-301577196ac4c341 2026-10-29T01:13:09.802Z weekly 0.7 https://radar.offseq.com/threat/libjackson-json-java-fasterxml-jackson-1x-confirmed-in-jackson-mapper-asl-versions-183-192-1911-1912-a99b1aa913670b4e 2026-10-29T00:56:56.255Z weekly 0.8 https://radar.offseq.com/threat/an-issue-in-the-confirmnameconstraints-function-wolfcryptsrcasnc-of-wolfssl-v591-and-v592-allows-782edacc24c1e494 2026-10-29T00:56:50.676Z weekly 0.8 https://radar.offseq.com/threat/qt6-base-a-use-after-free-vulnerability-in-the-qt-qnetworkaccessmanager-http2-client-support-of-the-qt-e6a35325c0607590 2026-10-29T01:13:06.510Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-out-of-bounds-write-in-net-allows-an-unauthorized-attacker-to-execute-code-over-a-network-cve-525a2c9100782da4 2026-10-29T00:56:45.907Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-permissive-list-of-allowed-inputs-in-net-allows-an-unauthorized-attacker-to-disclose-cve-2026-6d019913a2dd17f4 2026-10-29T01:13:00.570Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-out-of-bounds-read-in-net-allows-an-unauthorized-attacker-to-disclose-information-over-a-cve-cdcc8927a8d58113 2026-10-29T00:56:43.135Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-origin-validation-error-in-net-allows-an-unauthorized-attacker-to-disclose-information-over-8ac07ebe580a2536 2026-10-29T01:12:57.604Z weekly 0.7 https://radar.offseq.com/threat/dotnet7-out-of-bounds-write-in-net-allows-an-unauthorized-attacker-to-execute-code-over-a-network-cve-57ee1cd34740c4bd 2026-10-29T00:56:40.123Z weekly 0.8 https://radar.offseq.com/threat/qt6-base-a-malicious-or-compromised-http2-server-withholding-settings-ack-can-send-rststream-on-a-ed95e91eda080b05 2026-10-29T01:12:54.725Z weekly 0.7 https://radar.offseq.com/threat/loop-with-unreachable-exit-condition-infinite-loop-vulnerability-in-erlang-otp-stdlib-erltar-module-c0356b9559e43f0e 2026-10-29T01:12:49.528Z weekly 0.7 https://radar.offseq.com/threat/erlang-hex-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-c0e79c4ae95b48e6 2026-10-29T00:44:58.445Z weekly 0.8 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-from-01360-until-01430-openapi3filter-accepts-openapi-31-array-f743b252482cf1cd 2026-10-29T00:44:55.133Z weekly 0.8 https://radar.offseq.com/threat/edk2-contains-a-vulnerability-in-bios-where-a-user-may-cause-out-of-bounds-write-classic-buffer-0654b944acd514a5 2026-10-29T00:44:51.612Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-98395-powerpcentry-fix-irqsoftmask-corruption-on-replayed-interrupt-exit-in-linux-kernel-76b32273c5f298d3 2026-10-29T01:12:44.108Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98396-powerpc-do-not-restore-kuap-in-archexittousermodeprepare-in-linux-kernel-7bc75c5c9d798e4f 2026-10-29T01:12:38.505Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98397-platformx86-x86-android-tablets-hold-device-reference-for-secondary-fwnode-teardown-in-c37fa2675f58b5fc 2026-10-29T01:12:33.375Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98418-schedcore-avoid-false-migration-warning-for-proxy-donors-in-linux-kernel-e9825b064eac2769 2026-10-29T01:12:28.886Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98438-mptcp-options-fix-uninit-value-in-mptcpwritedatafin-in-linux-kernel-444b94c57ab0ecc9 2026-10-29T01:01:13.450Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98500-hid-hid-oxp-use-canceldelayedworksync-in-remove-in-linux-kernel-ee04f1aea5116a60 2026-10-29T01:01:04.786Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98540-fprobe-terminate-the-fgraphdata-list-when-the-reservation-is-not-filled-in-linux-kernel-62f6fc6bc9456c4d 2026-10-29T01:00:59.090Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98557-gve-dqo-fix-header-length-used-by-gvecansendtso-for-udp-gso-in-linux-kernel-e4ebcbb496837b2c 2026-10-29T01:00:54.480Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98587-firewire-cdev-fix-back-transition-for-isoresourceauto-client-resource-in-linux-kernel-ae874b920a522738 2026-10-29T01:00:48.975Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98600-bluetooth-rfcomm-reject-short-ea0-frames-in-rfcommrecvframe-in-linux-kernel-94dccd2abf59d892 2026-10-29T01:00:44.439Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98619-net-ethtool-keep-rtnllock-for-the-ioctl-self-test-in-linux-kernel-6179a97f8150cd4a 2026-10-29T00:44:46.040Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-98627-bpf-preserve-packet-pointer-class-displacement-in-regsafe-in-linux-kernel-7ce98661d3b04dd1 2026-10-29T00:44:40.820Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-98645-hid-winwing-fix-use-after-free-in-force-feedback-teardown-in-linux-kernel-14a7f356be9aed21 2026-10-29T01:00:39.424Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98787-bpf-fix-missing-migration-protection-in-rhtabmaplookupanddeletebatch-in-linux-kernel-c510960ffc381b19 2026-10-29T01:00:34.128Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98832-blk-cgroup-save-irq-state-in-blkgtrygetclosest-in-linux-kernel-bf89b401ab90fb7f 2026-10-29T01:00:29.342Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98864-schedext-wait-for-scxopssdispatching-before-reenqueueing-a-task-in-linux-kernel-33929a53beb48d54 2026-10-29T01:00:23.552Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98865-schedext-dont-run-opsdequeue-with-a-dsq-lock-held-in-linux-kernel-5bd98b846be9999c 2026-10-29T01:00:17.653Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-98866-schedcache-introduce-taskstruct-schedcachegrp-to-fix-uaf-in-linux-kernel-c0535ff51b87755d 2026-10-29T00:44:35.869Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-99088-net-openvswitch-validate-transport-header-presence-in-setipv6addr-in-linux-kernel-b85955a75a679479 2026-10-29T01:00:12.050Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99089-asoc-samsung-i2s-enable-opclk-in-probe-to-balance-runtime-pm-in-linux-kernel-331f92b1ea5a9d71 2026-10-29T01:00:06.986Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99090-drmamdgpu-serialize-vblank-counter-reads-against-gpu-reset-in-linux-kernel-b1abe1beed11eb61 2026-10-29T01:00:02.548Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99091-bluetooth-mgmt-fix-status-of-pending-commands-flushed-on-power-off-in-linux-kernel-133b8fa4d751e066 2026-10-29T00:59:57.678Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99092-riscv-patch-fix-handling-of-bpf-jit-execmem-addresses-in-linux-kernel-7f0dc219e0b3f320 2026-10-29T00:59:52.613Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99093-mm-dont-schedule-deferred-kernel-page-table-freeing-while-booting-in-linux-kernel-757716d697c31639 2026-10-29T00:59:47.207Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99094-bluetooth-btintelpcie-fix-tx-descriptor-bounds-check-in-linux-kernel-fb19d14457f9d903 2026-10-29T00:58:29.539Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99095-drmvc4-drain-the-hangcheck-timer-and-works-on-v3d-unbind-in-linux-kernel-edd487f93d23ba81 2026-10-29T00:58:25.190Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99096-iouringregister-dont-exempt-disabled-rings-from-task-restrictions-in-linux-kernel-38975a7bc284c1a1 2026-10-29T00:58:19.617Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99097-tee-shm-reject-zero-sized-allocations-in-teedynshmallochelper-in-linux-kernel-4298d42a7e00c1d0 2026-10-29T00:58:14.745Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99098-dm-integrity-fix-buffer-overflow-in-inline-mode-with-large-tag-size-in-linux-kernel-8b5e25c0ea21a014 2026-10-29T00:58:09.650Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99099-x86cpuamd-fix-amd-tlbi-erratum-1718-in-linux-kernel-20d145e422f4986b 2026-10-29T00:58:04.939Z weekly 0.7 https://radar.offseq.com/threat/gst-plugins-bad10-a-flaw-was-found-in-gstreamers-h266-codec-parser-library-libgstcodecparsers-cve-2026-577d112f123d7a3c 2026-10-29T00:58:00.352Z weekly 0.7 https://radar.offseq.com/threat/gst-plugins-bad10-a-flaw-was-found-in-the-gstreamer-multimedia-frameworks-asf-muxer-plugin-asfmux-cve-5abf666a36c2a6a0 2026-10-29T00:57:52.381Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-the-dpdk-gso-library-cve-2026-100236-a356fae25fbf8dec 2026-10-29T00:44:28.587Z weekly 0.8 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-prior-to-01450-openapi3filtervalidationhandler-uses-the-routerslegacy-a3179436f9b88b81 2026-10-29T00:57:45.377Z weekly 0.7 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-prior-to-01450-openapi3loader-can-dereference-a-nil-schemarefvalue-b16756853d563d46 2026-10-29T00:57:41.708Z weekly 0.7 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-prior-to-01460-openapi3filtervalidateresponse-passes-a-nil-response-db7b716d37947932 2026-10-29T00:44:21.728Z weekly 0.8 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-from-01450-until-01460-openapi3filter-repeatedly-calls-988448ab07f6f4d9 2026-10-29T00:57:37.780Z weekly 0.7 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-from-01440-until-01470-openapi3filtervalidationhandler-validates-an-d98c67bfd5dbe031 2026-10-29T00:42:13.329Z weekly 0.8 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-prior-to-01480-the-openapi-31-validation-path-passes-yaml-nan-and-32af58f5d27fab55 2026-10-29T00:42:08.192Z weekly 0.8 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-from-01360-until-01490-three-openapi3filter-decoder-paths-that-were-f5cd7ac33c830bba 2026-10-29T00:42:03.914Z weekly 0.8 https://radar.offseq.com/threat/golang-github-getkin-kin-openapi-prior-to-01490-runtime-request-response-and-direct-schema-validation-1c0db89a36a01503 2026-10-29T00:42:00.375Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-dll-services-component-cve-2026-100801-4684b60121839775 2026-10-29T00:41:57.143Z weekly 0.8 https://radar.offseq.com/threat/libnginx-mod-js-description-nginx-javascript-njs-has-a-vulnerability-where-the-njs-xml-module-exposes-98e2c0552fa8c7c4 2026-10-29T00:57:33.722Z weekly 0.7 https://radar.offseq.com/threat/libnginx-mod-js-description-nginx-javascript-njs-has-a-vulnerability-where-the-built-in-njs-cve-2026-08a62420d88dbc32 2026-10-29T00:57:28.657Z weekly 0.7 https://radar.offseq.com/threat/qtbase-opensource-src-gles-a-malformed-header-in-the-binary-file-fed-to-cve-2026-101201-2ccea490ffb745c5 2026-10-29T00:57:24.699Z weekly 0.7 https://radar.offseq.com/threat/nsd-when-base64-data-is-split-up-in-pieces-of-3-character-or-less-tokens-were-incorrectly-cve-2026-610d7a16af43d0fb 2026-10-29T00:41:52.172Z weekly 0.8 https://radar.offseq.com/threat/nsd-when-a-svcb-or-https-rr-has-filled-the-wire-format-rdata-up-to-the-brim-another-ech-parameter-may-392fd5d612788c2f 2026-10-29T00:41:47.101Z weekly 0.8 https://radar.offseq.com/threat/nsd-a-hip-resource-record-that-fills-the-rdata-near-or-at-is-limit-and-has-another-dname-rdata-field-a-9afbcb51833e151b 2026-10-29T00:41:42.764Z weekly 0.8 https://radar.offseq.com/threat/nsd-tokens-of-text-in-rdata-of-for-example-txt-records-under-32-bytes-are-not-checked-to-stay-within-32a2fb38ee700b9b 2026-10-29T00:29:12.540Z weekly 0.8 https://radar.offseq.com/threat/node-axios-from-1150-until-1200-axios-shouldbypassproxy-treats-the-noproxy-cidr-form-as-a-cve-2026-f9b757a8e4314afa 2026-10-29T00:57:19.941Z weekly 0.7 https://radar.offseq.com/threat/xen-this-cna-information-record-relates-to-multiple-cves-the-text-explains-which-c8f98dd83013708a 2026-10-29T00:29:07.237Z weekly 0.8 https://radar.offseq.com/threat/python-asteval-asteval-is-a-python-expression-evaluator-designed-for-restricted-execution-cve-2026-2441eafc581f9011 2026-10-29T00:57:16.006Z weekly 0.7 https://radar.offseq.com/threat/async-http-client-the-asynchttpclient-library-allows-java-applications-to-execute-http-requests-and-295d955f8ce52002 2026-10-29T00:57:12.254Z weekly 0.7 https://radar.offseq.com/threat/cpp-httplib-prior-to-0510-createredirectclient-removes-host-proxy-authorization-and-authorization-ad96a3ca550a4490 2026-10-29T00:29:01.800Z weekly 0.8 https://radar.offseq.com/threat/prior-to-174-joserfcjwsdeserializejson-accepts-a-jws-general-json-serialization-with-an-cve-2026-102946-98cb00931c538986 2026-10-29T00:28:58.301Z weekly 0.9 https://radar.offseq.com/threat/rebar3-improper-certificate-validation-vulnerability-in-hexpm-hexcore-allows-an-attacker-who-can-b2464aef043fdeec 2026-10-29T00:46:09.807Z weekly 0.7 https://radar.offseq.com/threat/erlang-hex-improper-certificate-validation-vulnerability-in-hexpm-hex-allows-an-attacker-who-can-5bfcb40834f0ffde 2026-10-29T00:46:04.447Z weekly 0.7 https://radar.offseq.com/threat/cpp-httplib-from-0290-until-0510-clientopenstream-in-httplibh-accepts-a-caller-controlled-path-that-3957b798ece937e9 2026-10-29T00:45:59.747Z weekly 0.7 https://radar.offseq.com/threat/p7zip-7-zip-before-2603-contains-an-uninitialized-memory-disclosure-vulnerability-in-the-squashfs-v4-a79b4c3af89fab7a 2026-10-29T00:45:56.152Z weekly 0.7 https://radar.offseq.com/threat/zoneminder-in-versions-1340-through-13638-the-web-interface-mishandles-failed-token-cve-2026-104198-531470ad8671be38 2026-10-29T00:45:51.688Z weekly 0.7 https://radar.offseq.com/threat/python-tinytag-from-200-until-230-an-m4a-file-containing-a-sub-atom-with-a-size-of-zero-inside-a-atom-019dd34605bc50b6 2026-10-29T00:45:47.958Z weekly 0.7 https://radar.offseq.com/threat/libosmocore-through-1141-contains-a-buffer-overflow-in-osmoiuupcomputepayloadcrc-in-cve-2026-104591-0fe4b412bb996d48 2026-10-29T00:45:44.813Z weekly 0.7 https://radar.offseq.com/threat/libosmocore-through-1141-contains-an-out-of-bounds-read-in-the-cbsp-write-replace-decoder-in-cve-2026-c236559d442c6f5c 2026-10-29T00:45:41.166Z weekly 0.7 https://radar.offseq.com/threat/osmo-msc-through-1150-contains-a-stack-based-buffer-overflow-in-decodemmename-in-cve-2026-104593-5d1164c71aae7e79 2026-10-29T00:45:37.881Z weekly 0.7 https://radar.offseq.com/threat/libosmocore-through-1141-contains-out-of-bounds-reads-in-the-ipa-ccm-identity-tag-parsers-in-cve-2026-936666d0f112b3e1 2026-10-29T00:45:33.620Z weekly 0.7 https://radar.offseq.com/threat/libosmocore-through-1141-contains-out-of-bounds-reads-in-the-gsm-0480-supplementary-service-cve-2026-b3ce3517dac90fed 2026-10-29T00:45:29.807Z weekly 0.7 https://radar.offseq.com/threat/libosmocore-through-1141-contains-an-out-of-bounds-read-in-iuuprxinitialization-in-cve-2026-104597-b0d60c139c915b8b 2026-10-29T00:45:25.568Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-cifs-utils-cve-2026-104715-c856076514d21cd7 2026-10-29T00:28:54.321Z weekly 0.8 https://radar.offseq.com/threat/php-react-http-from-100-until-1111-reacthttpbrowser-uses-clientrequeststreamhandledata-to-append-a0f4eeccc43ec7d5 2026-10-29T00:28:44.420Z weekly 0.8 https://radar.offseq.com/threat/dotnet7-heap-based-buffer-overflow-in-microsoft-quic-allows-an-unauthorized-attacker-to-execute-cve-e03e53a7a650df5d 2026-10-29T00:28:40.931Z weekly 0.9 https://radar.offseq.com/threat/improper-certificate-validation-vulnerability-in-the-ssl-application-in-erlangotp-allows-a-client-that-226bdefb2bb516a3 2026-10-29T00:45:20.672Z weekly 0.7 https://radar.offseq.com/threat/rebar3-improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-hexpm-hexcore-0782ee29cd2c9cc7 2026-10-29T00:45:15.158Z weekly 0.7 https://radar.offseq.com/threat/erlang-hex-improper-validation-of-integrity-check-value-vulnerability-in-hexpm-hex-allows-a-package-afffae2d71e8eb79 2026-10-29T00:45:09.981Z weekly 0.7 https://radar.offseq.com/threat/hashicorp-consul-and-consul-enterprise-are-vulnerable-to-an-authorization-bypass-in-service-mesh-cve-c982ede6b7771b8b 2026-10-29T00:28:38.205Z weekly 0.8 https://radar.offseq.com/threat/hashicorp-consul-and-consul-enterprise-are-vulnerable-to-a-denial-of-service-in-the-http-api-that-may-c2ca4c17ef38d382 2026-10-29T00:27:08.073Z weekly 0.8 https://radar.offseq.com/threat/erlang-hex-protection-mechanism-failure-vulnerability-in-hexpm-hex-allows-the-owner-of-a-package-or-an-70fa4d38bc71dcca 2026-10-29T00:27:04.075Z weekly 0.8 https://radar.offseq.com/threat/hashicorp-consul-and-consul-enterprise-1170-up-to-204-are-vulnerable-to-an-authorization-bypass-in-the-8262f42d7a908abd 2026-10-29T00:27:00.151Z weekly 0.8 https://radar.offseq.com/threat/qtbase-opensource-src-gles-a-malicious-svg-can-trigger-an-integer-overflow-which-in-turn-triggers-a-46790390cde57a2e 2026-10-29T00:44:17.056Z weekly 0.7 https://radar.offseq.com/threat/improper-certificate-validation-in-the-openvpn-3-core-library-version-34-through-3117-allows-attackers-62c9136564ee75f3 2026-10-29T00:26:56.560Z weekly 0.8 https://radar.offseq.com/threat/mongo-cxx-driver-the-mongodb-c-driver-discards-content-after-an-embedded-nul-byte-in-certain-cve-2026-809af5cb4b25444d 2026-10-29T00:44:12.132Z weekly 0.7 https://radar.offseq.com/threat/mongo-c-driver-the-bson-buffer-reservation-api-in-the-mongodb-c-driver-can-record-a-length-smaller-cve-66c7b7b6be1e0c12 2026-10-29T00:26:53.672Z weekly 0.8 https://radar.offseq.com/threat/mongo-c-driver-an-incorrect-calculation-in-decimal128-string-parsing-in-the-mongodb-c-driver-can-96c46fc2153adf84 2026-10-29T00:44:08.183Z weekly 0.7 https://radar.offseq.com/threat/openjpeg-240-through-254-and-git-master-through-commit-8314119b-contains-an-out-of-bounds-read-and-cd5adb600a4cb04f 2026-10-29T00:44:04.109Z weekly 0.7 https://radar.offseq.com/threat/integer-overflow-in-the-message-buffer-growth-logic-mbufmakeroom-in-pgbouncer-1210-through-1260-allows-b5fdf24d831adf3e 2026-10-29T00:44:00.295Z weekly 0.7 https://radar.offseq.com/threat/an-infinite-loop-in-pgbouncer-1200-through-1260-allows-an-unauthenticated-remote-attacker-to-cve-2026-1eaa6ea489f17f6d 2026-10-29T00:26:49.119Z weekly 0.8 https://radar.offseq.com/threat/improper-authentication-in-pgbouncer-1170-through-1260-allows-a-remote-attacker-who-knows-the-password-7e4330fa3507c4ca 2026-10-29T00:26:45.927Z weekly 0.8 https://radar.offseq.com/threat/mit-krb5-through-1222-contains-a-null-pointer-dereference-vulnerability-in-the-kdcs-55beea33d2f0509a 2026-10-29T00:43:56.527Z weekly 0.7 https://radar.offseq.com/threat/mit-kerberos-5-krb5-through-1222-contains-a-null-pointer-dereference-in-makecredlist-in-rdcredc-that-a6de2ae58b5d19ee 2026-10-29T00:43:50.641Z weekly 0.7 https://radar.offseq.com/threat/when-curl-is-built-with-gnutls-a-malicious-websocket-server-can-make-curl-send-memory-past-its-send-6d580cdf0c60373a 2026-10-29T00:43:45.771Z weekly 0.7 https://radar.offseq.com/threat/when-curloptinterface-or-the-command-line-tools-interface-option-is-set-with-one-of-the-documented-59f5ab3a34f2d17b 2026-10-29T00:43:31.494Z weekly 0.7 https://radar.offseq.com/threat/symfony-prior-to-versions-5454-6446-7419-and-817-headerutilssplit-parsed-header-values-with-a-pattern-dac50a753bf9b57e 2026-10-29T00:26:42.753Z weekly 0.8 https://radar.offseq.com/threat/libdbi-perl-dbi-versions-before-1656-for-perl-crash-via-type-confusion-in-dbiprofile-when-a-database-748c3ea88a64df04 2026-10-29T00:42:51.179Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http2-implementation-of-37c1f3518cc7dc5f 2026-10-29T00:14:12.968Z weekly 0.8 https://radar.offseq.com/threat/inefficient-algorithmic-complexity-vulnerability-in-the-http2-implementation-of-mtrudel-bandit-allows-4fb33da15927bd8a 2026-10-29T00:14:09.381Z weekly 0.8 https://radar.offseq.com/threat/a-weakness-has-been-identified-in-meetecho-janus-gateway-up-to-142-cve-2026-108830-e2e1abe4915b4ff7 2026-10-29T00:42:46.208Z weekly 0.7 https://radar.offseq.com/threat/a-security-vulnerability-has-been-detected-in-meetecho-janus-gateway-up-to-142-cve-2026-108831-7081a42c6fdc76bd 2026-10-29T00:42:42.004Z weekly 0.7 https://radar.offseq.com/threat/node-js-beautify-a-weakness-has-been-identified-in-beautifier-js-beautify-up-to-1151203-cve-2026-109149-07399f348c47a29b 2026-10-29T00:42:36.866Z weekly 0.7 https://radar.offseq.com/threat/freerdp-3100-through-3322-contains-a-heap-buffer-overflow-in-the-winpr-pngwritedata-callback-that-8c55085baa60bdad 2026-10-29T00:42:34.042Z weekly 0.7 https://radar.offseq.com/threat/freerdp-before-3320-contains-a-double-free-vulnerability-in-nsccontextinitializeencode-that-leaves-f1219fd4cc6d7151 2026-10-29T00:14:05.700Z weekly 0.8 https://radar.offseq.com/threat/in-symfony-yaml-prior-to-versions-5454-6445-7418-and-816-yamlparserlexinlinestructure-recursed-8bc5cf41670d5a61 2026-10-29T00:13:59.097Z weekly 0.8 https://radar.offseq.com/threat/in-symfony-expression-language-versions-prior-to-5454-6448-7421-and-819-the-parser-of-the-d95d3091ff05ad90 2026-10-29T00:13:54.784Z weekly 0.8 https://radar.offseq.com/threat/improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-the-http2-711946bee4f40d1f 2026-10-29T00:13:50.694Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-application-update-component-cve-2026-109704-bdcfc39049fbc865 2026-10-29T00:13:46.852Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-site-isolation-issue-due-to-incorrect-boundary-conditions-use-after-free-cve-7fa12707173c178f 2026-10-29T00:13:41.556Z weekly 0.9 https://radar.offseq.com/threat/use-after-free-in-the-storage-indexeddb-component-cve-2026-109706-7fd429d92c764ffb 2026-10-29T00:42:27.764Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-use-after-free-in-the-networking-component-cve-2026-109707-75b03aea2fd314e0 2026-10-29T00:12:19.492Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-incorrect-boundary-conditions-in-the-networking-component-cve-2026-109708-4d3ab8d00128aee7 2026-10-29T00:12:14.890Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-information-disclosure-privilege-escalation-in-the-security-process-sandboxing-component-cve-a2672e016ec9adec 2026-10-29T00:12:09.545Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-graphics-text-component-cve-2026-109710-e280dfb71f73e348 2026-10-29T00:42:23.067Z weekly 0.7 https://radar.offseq.com/threat/use-after-free-in-the-graphics-canvas2d-component-cve-2026-109711-6bae89672db0cd2c 2026-10-29T00:42:18.420Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-uninitialized-memory-in-the-graphics-component-cve-2026-109712-c2a39aacf4a94f10 2026-10-29T00:12:04.607Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-layout-component-cve-2026-109714-8f445b4b6c15157d 2026-10-29T00:30:36.391Z weekly 0.7 https://radar.offseq.com/threat/use-after-free-in-the-dom-bindings-webidl-component-cve-2026-109717-c1598c86bde08651 2026-10-29T00:30:31.643Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-use-after-free-in-the-xml-component-cve-2026-109718-37983805e2cf0393 2026-10-29T00:30:26.529Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-race-condition-use-after-free-in-the-graphics-canvaswebgl-component-cve-2026-109719-e3817fa92dcd3be4 2026-10-29T00:30:21.442Z weekly 0.7 https://radar.offseq.com/threat/jit-miscompilation-in-the-javascript-webassembly-component-cve-2026-109720-85c81798bad89483 2026-10-29T00:11:59.675Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-jit-miscompilation-in-the-javascript-engine-jit-component-cve-2026-109722-5b46a4a32712aff6 2026-10-29T00:11:54.278Z weekly 0.8 https://radar.offseq.com/threat/integer-overflow-in-the-layout-text-and-fonts-component-cve-2026-109723-64e3d2bd730ab335 2026-10-29T00:30:16.390Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-use-after-free-in-the-svg-component-cve-2026-109726-b881cf612d466543 2026-10-29T00:30:11.434Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-use-after-free-in-the-audiovideo-component-cve-2026-109727-a2d536a093ee2030 2026-10-29T00:30:06.821Z weekly 0.7 https://radar.offseq.com/threat/use-after-free-in-the-dom-animation-component-cve-2026-109728-6f3c2e994e59e54b 2026-10-29T00:30:02.486Z weekly 0.7 https://radar.offseq.com/threat/use-after-free-in-the-javascript-engine-jit-component-cve-2026-109729-0d1092ba1b5328c1 2026-10-29T00:29:54.191Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-integer-overflow-in-the-graphics-component-cve-2026-109730-07004ae64d69994e 2026-10-29T00:11:48.913Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-dom-streams-component-cve-2026-109732-b6c884373292b3b0 2026-10-29T00:29:49.483Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-jit-miscompilation-in-the-javascript-engine-jit-component-cve-2026-109733-22294597d20bc905 2026-10-29T00:11:43.310Z weekly 0.8 https://radar.offseq.com/threat/mitigation-bypass-in-the-dom-security-component-cve-2026-109734-5fe7cbee87eed478 2026-10-28T23:59:22.249Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-dom-animation-component-cve-2026-109735-d193886b6aad5840 2026-10-29T00:29:44.556Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-frame-poisoning-in-the-layout-component-cve-2026-109736-44550163506b3c25 2026-10-28T23:59:17.262Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-mitigation-bypass-in-the-enterprise-policies-component-cve-2026-109737-619d04b72a1f4c0e 2026-10-28T23:59:12.455Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-audiovideo-playback-component-cve-2026-109738-5be84e5209e8871f 2026-10-29T00:29:40.395Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-webextensions-component-cve-2026-109739-15d57c1b6af2cd67 2026-10-28T23:59:07.488Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-incorrect-boundary-conditions-in-the-widget-win32-component-cve-2026-ce1040ff39c045a1 2026-10-28T23:59:02.777Z weekly 0.9 https://radar.offseq.com/threat/use-after-free-in-the-storage-bucket-file-system-component-cve-2026-109741-f123747429650381 2026-10-29T00:29:35.053Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-information-disclosure-in-the-pdf-viewer-component-cve-2026-109742-151d5809404fb5dd 2026-10-29T00:29:29.809Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-panning-and-zooming-component-cve-2026-109743-7e2b1abb26c27798 2026-10-28T23:58:57.645Z weekly 0.8 https://radar.offseq.com/threat/other-issue-in-the-dom-file-component-cve-2026-109744-06dbf7e55912de94 2026-10-28T23:58:52.410Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-uninitialized-memory-in-the-dom-web-serial-component-cve-2026-109745-1c2ca0d3c2b38416 2026-10-28T23:58:47.986Z weekly 0.9 https://radar.offseq.com/threat/mitigation-bypass-in-the-dom-security-component-cve-2026-109746-e5b9416ca898f71f 2026-10-28T23:57:20.599Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-javascript-webassembly-component-cve-2026-109748-486506195277a9fe 2026-10-29T00:29:25.519Z weekly 0.7 https://radar.offseq.com/threat/use-after-free-in-the-javascript-webassembly-component-cve-2026-109749-f6f6c1935098bbab 2026-10-29T00:29:20.861Z weekly 0.7 https://radar.offseq.com/threat/site-isolation-issue-in-the-dom-web-authentication-component-cve-2026-109750-933f27354c2c529e 2026-10-28T23:57:15.256Z weekly 0.9 https://radar.offseq.com/threat/mozjs52-information-disclosure-in-the-networking-component-cve-2026-109751-66289a4cc542c486 2026-10-29T00:28:32.931Z weekly 0.7 https://radar.offseq.com/threat/use-after-free-in-the-dom-workers-component-cve-2026-109752-b8315d7c8277af96 2026-10-29T00:28:27.887Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-layout-component-cve-2026-109753-8070909096417a7a 2026-10-28T23:57:10.241Z weekly 0.8 https://radar.offseq.com/threat/sandbox-escape-in-the-dom-content-processes-component-cve-2026-109755-d48aa1853fbd3fd1 2026-10-28T23:57:02.646Z weekly 0.9 https://radar.offseq.com/threat/privilege-escalation-in-the-dom-navigation-component-cve-2026-109756-e1eb38e5bd87bc9b 2026-10-28T23:56:57.550Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-sandbox-escape-due-to-race-condition-in-the-networking-component-cve-2026-109757-aedd76ff50b76183 2026-10-28T23:56:53.097Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-site-isolation-issue-in-the-networking-component-cve-2026-109759-430a0d2f4368f780 2026-10-28T23:56:47.895Z weekly 0.8 https://radar.offseq.com/threat/mitigation-bypass-in-the-networking-http-component-cve-2026-109760-7293161ff97012cb 2026-10-28T23:56:43.281Z weekly 0.8 https://radar.offseq.com/threat/use-after-free-in-the-javascript-webassembly-component-cve-2026-109761-344b432aa900656e 2026-10-29T00:28:22.816Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-mitigation-bypass-in-the-file-handling-component-cve-2026-109763-52f2fd557e40dae0 2026-10-29T00:28:17.373Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-mitigation-bypass-in-the-enterprise-policies-component-cve-2026-109764-b5d3ebe28a9ba0bc 2026-10-29T00:28:12.831Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-race-condition-use-after-free-in-the-graphics-text-component-cve-2026-109765-2970f81b6494944e 2026-10-29T00:28:07.577Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-mitigation-bypass-in-the-enterprise-policies-component-cve-2026-109766-ba8ceb0893fad7ee 2026-10-28T23:44:31.643Z weekly 0.8 https://radar.offseq.com/threat/mozjs52-information-disclosure-in-the-networking-component-cve-2026-109767-e8a2c4eb60e00fa7 2026-10-29T00:28:02.147Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-denial-of-service-in-the-site-reports-component-cve-2026-109768-cd0989105f1c7789 2026-10-29T00:27:57.282Z weekly 0.7 https://radar.offseq.com/threat/information-disclosure-in-the-networking-cache-component-cve-2026-109769-352a13d02ea3396a 2026-10-29T00:27:52.867Z weekly 0.7 https://radar.offseq.com/threat/spoofing-issue-in-the-dom-web-serial-component-cve-2026-109770-96a9ab95b0513692 2026-10-29T00:27:47.829Z weekly 0.7 https://radar.offseq.com/threat/information-disclosure-in-the-webrtc-networking-component-cve-2026-109771-2eeadea554232701 2026-10-29T00:27:43.064Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-denial-of-service-in-the-sync-component-cve-2026-109773-8444c154c71e17c5 2026-10-29T00:27:38.351Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-denial-of-service-in-the-webrtc-component-cve-2026-109775-b3eff43a7dc89428 2026-10-29T00:27:32.265Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-race-condition-in-the-xpcom-component-cve-2026-109776-33ea994bc1566a6a 2026-10-29T00:27:27.886Z weekly 0.7 https://radar.offseq.com/threat/information-disclosure-in-the-storage-indexeddb-component-cve-2026-109777-30f6381f14a5daf2 2026-10-29T00:27:22.863Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-privilege-escalation-in-the-webextensions-component-cve-2026-109778-8dcaa09837f3eb8b 2026-10-28T23:44:26.380Z weekly 0.8 https://radar.offseq.com/threat/race-condition-in-the-networking-dns-component-cve-2026-109779-a4afbf9cc323a727 2026-10-29T00:27:17.712Z weekly 0.7 https://radar.offseq.com/threat/denial-of-service-in-the-printing-output-component-cve-2026-109781-26dc4e22a84ba694 2026-10-29T00:27:13.154Z weekly 0.7 https://radar.offseq.com/threat/in-fail2ban-0105-through-111-before-ddd879d-the-sshd-filter-configfilterdsshdconf-accepts-cve-2026-fe376b3695c05301 2026-10-29T00:15:39.718Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-gnome-remote-desktop-as-shipped-in-red-hat-enterprise-linux-cve-2026-109832-7f9c9d55e46a93a8 2026-10-28T23:44:21.391Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-gnome-remote-desktop-as-shipped-in-red-hat-enterprise-linux-cve-2026-109833-fc750cc87108543b 2026-10-29T00:15:34.710Z weekly 0.7 https://radar.offseq.com/threat/node-undici-in-versions-8110-and-8111-its-experimental-websocket-client-which-is-enabled-by-default-27a616bf49a20e34 2026-10-28T23:44:16.542Z weekly 0.8 https://radar.offseq.com/threat/node-undici-in-versions-6230-through-6290-7180-through-7300-and-800-through-8121-its-fetch-43af5e78589ca3a8 2026-10-28T23:44:12.866Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-the-clevis-pkcs11-pin-cve-2026-109968-11b39042140af686 2026-10-29T00:15:27.199Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-the-clevis-pkcs11-pin-cve-2026-109969-a0004e214c265443 2026-10-29T00:15:18.908Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-the-clevis-pkcs11-pin-cve-2026-109970-0a7dffc872ef2259 2026-10-29T00:15:10.897Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-the-clevis-pkcs11-pin-cve-2026-109971-dcce50a7aca49c06 2026-10-29T00:15:00.737Z weekly 0.7 https://radar.offseq.com/threat/thunderbird-several-buffer-growth-sites-in-libmime-performed-size-arithmetic-in-32-bit-types-cve-2026-ccf80d4dbb9700ed 2026-10-28T23:44:08.358Z weekly 0.8 https://radar.offseq.com/threat/thunderbird-a-malicious-compromised-or-mitm-controlled-exchange-server-can-return-a-single-well-formed-934020fdc404518a 2026-10-28T23:44:02.546Z weekly 0.8 https://radar.offseq.com/threat/ow2-asm-50-before-911-contains-an-excessive-memory-allocation-vulnerability-in-c837d19f0420278a 2026-10-29T00:14:52.240Z weekly 0.7 https://radar.offseq.com/threat/ow2-asm-30-before-911-contains-an-excessive-memory-allocation-vulnerability-in-23f149ad957be77e 2026-10-29T00:14:48.698Z weekly 0.7 https://radar.offseq.com/threat/ow2-asm-30-before-911-contains-an-uncontrolled-recursion-vulnerability-in-29ebe1dbd664fffb 2026-10-29T00:14:45.200Z weekly 0.7 https://radar.offseq.com/threat/ow2-asm-30-before-911-contains-a-quadratic-memory-allocation-vulnerability-in-97c5ae46e67dece5 2026-10-29T00:14:41.773Z weekly 0.7 https://radar.offseq.com/threat/ow2-asm-30-before-911-contains-a-denial-of-service-vulnerability-that-allows-attackers-to-exhaust-cpu-3fec28b29929925e 2026-10-29T00:14:38.169Z weekly 0.7 https://radar.offseq.com/threat/ow2-asm-31-before-911-contains-an-excessive-memory-allocation-vulnerability-in-the-asm-commons-69a5ea9bb511542d 2026-10-29T00:14:34.784Z weekly 0.7 https://radar.offseq.com/threat/ow2-asm-30-before-911-contains-an-uncontrolled-recursion-vulnerability-in-signaturereaderparsetype-76426cff0597faa8 2026-10-29T00:14:31.871Z weekly 0.7 https://radar.offseq.com/threat/ow2-asm-30-before-911-contains-an-uncontrolled-memory-allocation-vulnerability-in-the-asm-commons-1f91d488d280f764 2026-10-29T00:14:28.693Z weekly 0.7 https://radar.offseq.com/threat/client-side-enforcement-of-server-side-security-vulnerability-in-the-websocket-connection-handling-of-54bad3656be69cc9 2026-10-29T00:14:24.742Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http2-implementation-of-cddca71588d5c0b0 2026-10-28T23:43:57.081Z weekly 0.8 https://radar.offseq.com/threat/ow2-asm-143-before-911-contains-an-excessive-resource-consumption-vulnerability-in-analyzeranalyze-58a634996c73ffe7 2026-10-29T00:14:20.361Z weekly 0.7 https://radar.offseq.com/threat/quirc-through-12-contains-an-excessive-iteration-vulnerability-in-findalignmentpattern-in-libidentifyc-64d09acf39f800b7 2026-10-29T00:14:16.223Z weekly 0.7 https://radar.offseq.com/threat/tinyexr-through-320-contains-a-heap-out-of-bounds-read-vulnerability-in-bb05ba8d76af1923 2026-10-29T00:13:35.191Z weekly 0.7 https://radar.offseq.com/threat/libyal-libpff-through-20260926-contains-an-integer-underflow-in-libpffrecordentrygetmultivalue-that-ac9dc78591951547 2026-10-29T00:13:31.654Z weekly 0.7 https://radar.offseq.com/threat/libsixel-before-187-r1-and-190-through-1105-contains-a-heap-out-of-bounds-write-vulnerability-in-60d7491dcb9ff04d 2026-10-29T00:13:26.830Z weekly 0.7 https://radar.offseq.com/threat/laszip-through-350-contains-an-invalid-free-vulnerability-in-laszipreadheader-that-allows-attackers-to-193a4b03d217a24f 2026-10-29T00:13:23.021Z weekly 0.7 https://radar.offseq.com/threat/mini-xml-400-through-406-contains-an-off-by-one-stack-out-of-bounds-write-in-mxmlstrtod-when-cve-2026-e807347dbb478ef1 2026-10-29T00:13:19.532Z weekly 0.7 https://radar.offseq.com/threat/librecad-libdxfrw-through-lc220-librecad-through-2215-contains-a-stack-based-out-of-bounds-read-db986032be33c389 2026-10-29T00:13:15.753Z weekly 0.7 https://radar.offseq.com/threat/xhtml2pdf-before-0219-contains-an-os-command-injection-vulnerability-in-pisastartviewer-that-allows-cddcac3446c2db13 2026-10-28T23:42:18.764Z weekly 0.8 https://radar.offseq.com/threat/libzvbi-through-0245-contains-an-out-of-bounds-write-vulnerability-in-the-teletext-decoder-that-allows-9234905d4f4e39f9 2026-10-29T00:13:10.760Z weekly 0.7 https://radar.offseq.com/threat/miniupnpc-through-233-contains-a-one-byte-heap-out-of-bounds-read-vulnerability-in-the-minixml-101dae817ce9b446 2026-10-29T00:13:06.628Z weekly 0.7 https://radar.offseq.com/threat/miniupnpc-through-233-contains-a-one-byte-heap-out-of-bounds-read-vulnerability-in-the-minixml-ac273139d16b55f4 2026-10-29T00:13:01.847Z weekly 0.7 https://radar.offseq.com/threat/sofia-sip-through-11318-contains-a-heap-out-of-bounds-read-vulnerability-in-msgmultipartparse-that-783a0e5225e15178 2026-10-29T00:12:57.401Z weekly 0.7 https://radar.offseq.com/threat/libcgns-cgns-through-452-contains-a-stack-out-of-bounds-read-vulnerability-in-adfireadnodeheader-that-d8406c9530298356 2026-10-29T00:12:52.763Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-before-480-for-perl-leak-the-decoded-key-of-an-cve-2026-8ff2013d2fc1fffe 2026-10-29T00:12:48.080Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-before-480-for-perl-allow-stack-exhaustion-via-cve-2026-6adf75f147f310a4 2026-10-29T00:12:43.666Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-433-before-480-for-perl-miss-duplicate-non-ascii-5febcffc943148d1 2026-10-29T00:12:39.421Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-433-before-480-for-perl-accept-malformed-cve-2026-5321dfa0cc38d847 2026-10-29T00:12:33.774Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-before-480-for-perl-allow-memory-exhaustion-by-cve-2026-aca90969e9c4f958 2026-10-29T00:12:28.918Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-428-before-480-for-perl-leak-the-array-cve-2026-e44c5a4e6b9cdaaf 2026-10-29T00:12:23.929Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-before-480-for-perl-allow-memory-exhaustion-by-cve-2026-7c0dfbbc25e2c105 2026-10-29T00:00:31.702Z weekly 0.7 https://radar.offseq.com/threat/a-vulnerability-was-determined-in-opensips-up-to-368401-cve-2026-110679-2af0fde6838f9148 2026-10-28T23:42:14.018Z weekly 0.8 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-420-before-480-for-perl-write-out-of-bounds-cve-2026-bdc2062d8d8bedcc 2026-10-29T00:00:27.092Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-before-480-for-perl-use-the-parent-interpreters-cve-2026-01ead79f99a50113 2026-10-29T00:00:22.750Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-442-before-480-for-perl-let-input-chunking-cve-2026-734da980331b8190 2026-10-29T00:00:18.822Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-30202-before-480-for-perl-leak-memory-and-retain-e7269393cbfbe5a3 2026-10-29T00:00:14.251Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-before-480-for-perl-leak-the-decoded-arguments-of-cve-a6070e6733b6aeb6 2026-10-29T00:00:10.158Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-before-480-for-perl-use-freed-filter-callbacks-cve-2026-fe9262b0a9e5b1d6 2026-10-29T00:00:05.486Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-443-before-480-for-perl-misorder-cve-2026-110687-66aa2c0475447f8a 2026-10-29T00:00:01.523Z weekly 0.7 https://radar.offseq.com/threat/libcpanel-json-xs-perl-cpaneljsonxs-versions-from-451-before-480-for-perl-allow-quadratic-cpu-cve-2026-cc6e4aa591a0f285 2026-10-28T23:59:57.290Z weekly 0.7 https://radar.offseq.com/threat/a-security-vulnerability-has-been-detected-in-praat-up-to-7002-cve-2026-110698-a15023e2a866a727 2026-10-28T23:59:53.178Z weekly 0.7 https://radar.offseq.com/threat/libsmb2-through-62-contains-a-heap-out-of-bounds-read-vulnerability-in-smb2decodefileallinfo-that-48097cc7397fced0 2026-10-28T23:59:48.023Z weekly 0.7 https://radar.offseq.com/threat/libsmb2-through-62-contains-a-heap-out-of-bounds-read-vulnerability-in-smb2decodefilefsvolumeinfo-and-ee9e794de78a9a9c 2026-10-28T23:59:44.596Z weekly 0.7 https://radar.offseq.com/threat/libsmb2-through-62-contains-an-integer-underflow-vulnerability-in-decodeacl-that-allows-malicious-smb-f930bc07d0727c05 2026-10-28T23:59:41.009Z weekly 0.7 https://radar.offseq.com/threat/mujs-136-before-139-contains-a-heap-out-of-bounds-read-and-write-vulnerability-in-arrayprototypesort-e1b9ccf9dc4e0d90 2026-10-28T23:59:37.662Z weekly 0.7 https://radar.offseq.com/threat/unshield-through-162-contains-a-heap-out-of-bounds-read-vulnerability-in-unshieldgetfiletable-that-b8874c524c651325 2026-10-28T23:59:33.952Z weekly 0.7 https://radar.offseq.com/threat/janus-webrtc-server-through-143-contains-a-path-traversal-vulnerability-in-the-recordplay-plugin-that-774fc8eaef4de77d 2026-10-28T23:59:30.005Z weekly 0.7 https://radar.offseq.com/threat/godot-engine-through-472-has-a-heap-out-of-bounds-write-in-the-radiance-hdr-hdr-image-decoder-cve-2026-69c8ce1af98b0e49 2026-10-28T23:58:41.467Z weekly 0.7 https://radar.offseq.com/threat/godot-engine-through-472-has-a-heap-out-of-bounds-write-in-the-binary-resource-loader-ced3f2e6f13ab912 2026-10-28T23:58:36.692Z weekly 0.7 https://radar.offseq.com/threat/godot-engine-through-472-has-an-out-of-bounds-read-in-the-optimized-translation-loader-017f89e923047fdd 2026-10-28T23:58:32.057Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-evolution-data-server-cve-2026-110777-44fb8eec33e42fe7 2026-10-28T23:58:27.255Z weekly 0.7 https://radar.offseq.com/threat/a-vulnerability-was-detected-in-ggml-org-whispercpp-up-to-194-cve-2026-110810-92b7bdc344d7a5a6 2026-10-28T23:58:20.160Z weekly 0.7 https://radar.offseq.com/threat/summary-qsstringify-with-arrayformat-comma-throws-typeerror-cannot-convert-object-to-primitive-value-a5d19552882731d5 2026-10-28T23:58:16.078Z weekly 0.7 https://radar.offseq.com/threat/freerdp-versions-from-300-before-3320-contain-a-null-pointer-dereference-in-the-rdpsnd-channel-when-a-ae69f6f70afc97ed 2026-10-28T23:58:11.821Z weekly 0.7 https://radar.offseq.com/threat/freerdp-versions-3130-before-3320-contain-a-resource-retention-flaw-in-driveprocessirpcreate-which-bf967a4b6e3d1580 2026-10-28T23:58:05.286Z weekly 0.7 https://radar.offseq.com/threat/freerdp-from-200-before-3320-contains-a-memory-exhaustion-vulnerability-in-wtsreaddrdynvcdatafirst-1e6631f608082e1f 2026-10-28T23:57:58.631Z weekly 0.7 https://radar.offseq.com/threat/freerdp-from-200-before-3320-contains-a-null-pointer-dereference-vulnerability-that-allows-malicious-05edaf8046f3fc80 2026-10-28T23:57:55.140Z weekly 0.7 https://radar.offseq.com/threat/freerdp-from-300-before-3320-contains-an-infinite-loop-vulnerability-in-httpresponserecv-that-allows-10cfc6e1f17df2f7 2026-10-28T23:57:48.833Z weekly 0.7 https://radar.offseq.com/threat/freerdp-200-before-3320-when-built-with-withlameon-and-withdspffmpegoff-has-a-heap-based-buffer-a3079ed4557f94ec 2026-10-28T23:42:10.189Z weekly 0.8 https://radar.offseq.com/threat/freerdp-shadow-server-from-300-before-3320-dispatches-input-pdus-during-the-confirm-active-state-before-30fc1c9e3766e98d 2026-10-28T23:42:04.338Z weekly 0.8 https://radar.offseq.com/threat/freerdp-330-before-3320-when-built-with-winprutilsimagejpegon-has-a-heap-based-out-of-bounds-write-in-99bbd4b9b149e947 2026-10-28T23:41:58.814Z weekly 0.8 https://radar.offseq.com/threat/python-git-gitpython-before-320-contains-an-information-disclosure-vulnerability-that-allows-malicious-ce4cb892d68e92cf 2026-10-28T23:57:42.712Z weekly 0.7 https://radar.offseq.com/threat/python-git-gitpython-before-320-contains-a-regular-expression-denial-of-service-vulnerability-in-the-05bd3637674f225f 2026-10-28T23:41:52.479Z weekly 0.8 https://radar.offseq.com/threat/python-git-gitpython-before-320-contains-a-remote-code-execution-vulnerability-that-allows-attackers-d814626a3fe6b39d 2026-10-28T23:41:47.578Z weekly 0.8 https://radar.offseq.com/threat/python-git-gitpython-from-3130-before-320-contains-a-remote-code-execution-vulnerability-in-remotepull-5e52f54c2774b2b8 2026-10-28T23:41:41.942Z weekly 0.8 https://radar.offseq.com/threat/python-git-gitpython-before-320-contains-an-argument-injection-vulnerability-in-headcheckout-that-d9f602e57fe170eb 2026-10-28T23:29:20.620Z weekly 0.8 https://radar.offseq.com/threat/python-git-gitpython-from-3162-before-320-contains-a-symlink-following-flaw-in-submodulemove-which-5eeaf057762d71a7 2026-10-28T23:57:38.439Z weekly 0.7 https://radar.offseq.com/threat/node-nodemailer-nodemailer-300-before-10013-has-a-regular-expression-denial-of-service-in-ab511447c3f6d4f2 2026-10-28T23:29:15.739Z weekly 0.8 https://radar.offseq.com/threat/node-nodemailer-nodemailer-from-300-before-10013-contains-an-improper-input-validation-vulnerability-5386d7b3869bcfb5 2026-10-28T23:57:34.023Z weekly 0.7 https://radar.offseq.com/threat/node-nodemailer-nodemailer-from-300-before-10010-contains-a-denial-of-service-vulnerability-in-61125983e8d143f1 2026-10-28T23:57:30.800Z weekly 0.7 https://radar.offseq.com/threat/node-nodemailer-nodemailer-from-300-before-10010-contains-a-quadratic-complexity-denial-of-service-2375c4dc69764a08 2026-10-28T23:57:27.907Z weekly 0.7 https://radar.offseq.com/threat/adplug-through-24-contains-a-heap-based-buffer-overflow-in-cksmplayerupdate-in-srcksmcpp-that-writes-a77e5d6e403fe0f6 2026-10-28T23:57:24.679Z weekly 0.7 https://radar.offseq.com/threat/adplug-through-24-contains-an-out-of-bounds-read-vulnerability-in-srcxsmcpp-that-allows-attackers-to-01dc4198c8a7efc4 2026-10-28T23:45:39.789Z weekly 0.7 https://radar.offseq.com/threat/adplug-through-24-contains-a-heap-out-of-bounds-read-vulnerability-in-cdmoloaderload-in-srcdmocpp-that-47149b28f5d47c5e 2026-10-28T23:45:35.162Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http11-chunked-body-reader-394aa051c208da73 2026-10-28T23:29:12.281Z weekly 0.8 https://radar.offseq.com/threat/improper-cleanup-on-thrown-exception-vulnerability-in-the-http2-handler-of-mtrudel-bandit-allows-an-9193f775362b615b 2026-10-28T23:29:08.571Z weekly 0.8 https://radar.offseq.com/threat/telegram-rlottie-numeric-truncation-remote-code-execution-vulnerability-cve-2026-111105-94f48a60d5f0cfdc 2026-10-28T23:29:03.813Z weekly 0.8 https://radar.offseq.com/threat/fluidsynth-through-261-contains-an-out-of-bounds-write-vulnerability-that-allows-attackers-to-corrupt-5349666182331fe9 2026-10-28T23:45:30.986Z weekly 0.7 https://radar.offseq.com/threat/cfitsio-through-470-contains-a-heap-based-out-of-bounds-read-vulnerability-in-the-imcompressc-215c9327925905fb 2026-10-28T23:29:00.397Z weekly 0.8 https://radar.offseq.com/threat/cfitsio-through-470-contains-a-heap-based-out-of-bounds-read-vulnerability-in-the-hcompress-tile-0275f339d52253f2 2026-10-28T23:28:55.701Z weekly 0.8 https://radar.offseq.com/threat/catdoc-through-095-contains-an-out-of-bounds-read-vulnerability-in-the-mulrk-record-handler-of-074ce57a43d2d03e 2026-10-28T23:45:26.826Z weekly 0.7 https://radar.offseq.com/threat/catdoc-through-095-contains-an-out-of-bounds-read-vulnerability-in-copyunicodestring-in-srcxlsparsec-38ae943804742dae 2026-10-28T23:45:22.317Z weekly 0.7 https://radar.offseq.com/threat/assimp-through-605-contains-a-null-pointer-dereference-vulnerability-in-the-ogre3d-importer-that-d4a2def7ee2b7fd7 2026-10-28T23:45:18.246Z weekly 0.7 https://radar.offseq.com/threat/open-asset-import-library-assimp-through-605-contains-a-null-pointer-dereference-vulnerability-in-the-69033723f1d1a18b 2026-10-28T23:45:14.853Z weekly 0.7 https://radar.offseq.com/threat/openslide-through-401-contains-a-heap-out-of-bounds-read-vulnerability-in-the-mirax-reader-that-allows-f8c76ed936010bd6 2026-10-28T23:45:11.226Z weekly 0.7 https://radar.offseq.com/threat/libxmp-through-474-contains-an-off-by-one-stack-out-of-bounds-read-vulnerability-in-the-prowizard-p61a-3922ea6a9870bf5d 2026-10-28T23:45:07.577Z weekly 0.7 https://radar.offseq.com/threat/gnome-libgxps-through-032-contains-a-heap-out-of-bounds-read-in-pathgeometrystartelement-that-allows-c96886210028e7d7 2026-10-28T23:45:03.569Z weekly 0.7 https://radar.offseq.com/threat/libfsapfs-through-20260921-contains-an-integer-underflow-in-libfsapfskeyencryptedkeyreaddata-that-017216e4fdbd1c4b 2026-10-28T23:44:59.804Z weekly 0.7 https://radar.offseq.com/threat/libfwsi-through-20260522-contains-a-heap-out-of-bounds-read-vulnerability-in-a88a6c98d2a2609d 2026-10-28T23:44:55.778Z weekly 0.7 https://radar.offseq.com/threat/libfwsi-through-20260522-contains-a-heap-out-of-bounds-read-vulnerability-in-6f41e760475822d7 2026-10-28T23:44:50.798Z weekly 0.7 https://radar.offseq.com/threat/libinstpatch-through-117-contains-a-heap-out-of-bounds-write-vulnerability-in-the-soundfont-2-loader-e2de18352cd0a8a1 2026-10-28T23:44:46.201Z weekly 0.7 https://radar.offseq.com/threat/libsmi-through-050-contains-an-out-of-bounds-write-vulnerability-in-smivalueasstring-in-libsmic-that-e77969296fc676ac 2026-10-28T23:44:42.422Z weekly 0.7 https://radar.offseq.com/threat/netsurf-libnsbmp-through-017-contains-an-out-of-bounds-read-vulnerability-in-bmpdecoderle8-and-332562dc68ff3ebc 2026-10-28T23:44:38.008Z weekly 0.7 https://radar.offseq.com/threat/netsurf-libnsbmp-through-017-contains-an-out-of-bounds-read-vulnerability-in-bmpdecodemask-that-allows-15cc92b811f77099 2026-10-28T23:43:32.974Z weekly 0.7 https://radar.offseq.com/threat/libregf-through-20260526-contains-a-heap-out-of-bounds-read-in-libregfvalueitemreadvaluedata-because-1b9b8ecb176521d3 2026-10-28T23:43:29.822Z weekly 0.7 https://radar.offseq.com/threat/zziplib-through-01380-contains-an-out-of-bounds-read-vulnerability-in-zzipparserootdirectory-in-2edb6bf51de4507d 2026-10-28T23:43:24.772Z weekly 0.7 https://radar.offseq.com/threat/zziplib-through-01380-contains-an-out-of-bounds-read-vulnerability-in-zzipmmappedc-that-allows-8aee4509ac93bc33 2026-10-28T23:43:19.698Z weekly 0.7 https://radar.offseq.com/threat/ansilove-libansilove-through-142-contains-an-out-of-bounds-read-vulnerability-in-ansilovexbin-in-fc401b21a92dd1ce 2026-10-28T23:43:15.056Z weekly 0.7 https://radar.offseq.com/threat/libansilove-130-through-142-contains-a-null-pointer-dereference-vulnerability-in-ansilovexbin-that-0ad8cb134957c3d9 2026-10-28T23:43:11.862Z weekly 0.7 https://radar.offseq.com/threat/libytnef-ytnef-through-212-contains-a-heap-out-of-bounds-read-vulnerability-in-decompressrtf-in-1aff64d53c31e547 2026-10-28T23:43:08.698Z weekly 0.7 https://radar.offseq.com/threat/libytnef-ytnef-through-212-contains-a-heap-out-of-bounds-read-vulnerability-in-mapiprint-that-allows-ce7f2ef7aabef56c 2026-10-28T23:43:04.742Z weekly 0.7 https://radar.offseq.com/threat/libyal-libesedb-through-20260704-contains-a-heap-out-of-bounds-read-vulnerability-in-ffffd98b49b802d9 2026-10-28T23:43:00.948Z weekly 0.7 https://radar.offseq.com/threat/libsidplayfp-through-311-contains-a-heap-out-of-bounds-read-vulnerability-that-allows-attackers-to-6113cecdf42f5f14 2026-10-28T23:42:56.319Z weekly 0.7 https://radar.offseq.com/threat/openjph-through-0320-contains-a-heap-out-of-bounds-write-vulnerability-in-the-htj2k-cleanup-pass-f60325ef8d9d0891 2026-10-28T23:42:52.237Z weekly 0.7 https://radar.offseq.com/threat/game-music-emu-libgme-through-065-contains-a-heap-out-of-bounds-read-vulnerability-in-the-ay-loader-abaa9adf0a720f2c 2026-10-28T23:42:48.043Z weekly 0.7 https://radar.offseq.com/threat/game-music-emu-libgme-through-065-contains-a-global-out-of-bounds-read-vulnerability-in-36192749015d953c 2026-10-28T23:42:42.772Z weekly 0.7 https://radar.offseq.com/threat/libtimidity-through-028-contains-a-stack-out-of-bounds-write-vulnerability-in-the-soundfont-loader-438fa95a39c530f7 2026-10-28T23:42:37.886Z weekly 0.7 https://radar.offseq.com/threat/libtimidity-through-028-contains-a-heap-out-of-bounds-read-vulnerability-in-the-soundfont-loader-in-4ee8c337d8b870c7 2026-10-28T23:42:33.685Z weekly 0.7 https://radar.offseq.com/threat/libtimidity-through-028-contains-an-out-of-bounds-access-vulnerability-in-initsoundfont-in-srcsndfontc-4b853b05d5a8d37f 2026-10-28T23:42:28.620Z weekly 0.7 https://radar.offseq.com/threat/sox-through-1442-contains-a-heap-out-of-bounds-write-vulnerability-in-lsxmsadpcmblockexpandi-in-50a0cf1cf4635eec 2026-10-28T23:42:24.457Z weekly 0.7 https://radar.offseq.com/threat/earthscope-libmseed-through-354-contains-a-heap-out-of-bounds-read-vulnerability-in-ms3detect-in-bf42a9ac0e371ca3 2026-10-28T23:30:34.745Z weekly 0.7 https://radar.offseq.com/threat/libewf-through-20260924-contains-a-heap-out-of-bounds-read-vulnerability-in-645eff4eff234b46 2026-10-28T23:30:30.889Z weekly 0.7 https://radar.offseq.com/threat/wildmidi-through-050-contains-a-heap-out-of-bounds-read-vulnerability-in-the-hmp-parser-wmparsenewhmp-122ebbc0e84a6bdd 2026-10-28T23:30:26.423Z weekly 0.7 https://radar.offseq.com/threat/wildmidi-through-050-contains-a-heap-out-of-bounds-read-vulnerability-in-wmparsenewhmi-in-srcfhmic-d8e10b86fc199c46 2026-10-28T23:30:21.715Z weekly 0.7 https://radar.offseq.com/threat/libmikmod-through-3315-contains-a-global-out-of-bounds-read-vulnerability-in-the-multitracker-loader-d969de75321f5812 2026-10-28T23:30:16.763Z weekly 0.7 https://radar.offseq.com/threat/libmikmod-through-3315-contains-a-heap-out-of-bounds-read-vulnerability-in-the-imfload-loader-that-36bb4ccd9d189aa8 2026-10-28T23:30:12.683Z weekly 0.7 https://radar.offseq.com/threat/node-body-parser-body-parser-is-body-parsing-middleware-for-nodejs-and-express-cve-2026-111181-16106fd26f2c35e5 2026-10-28T23:28:51.548Z weekly 0.8 https://radar.offseq.com/threat/gst-plugins-good10-gstreamer-rtpl16depay-heap-based-buffer-overflow-remote-code-execution-cve-2026-d08ca6dbd8754269 2026-10-28T23:27:22.276Z weekly 0.9 https://radar.offseq.com/threat/libical-through-406-contains-a-heap-based-out-of-bounds-read-in-icalvaluedecodeicalstring-in-ea06f34b824e7452 2026-10-28T23:30:08.722Z weekly 0.7 https://radar.offseq.com/threat/gst-plugins-bad010-libmodplug-through-0891-contains-a-heap-based-out-of-bounds-write-in-0763ff696ac338f8 2026-10-28T23:30:04.890Z weekly 0.7 https://radar.offseq.com/threat/gst-plugins-bad010-libmodplug-through-0891-contains-a-heap-based-out-of-bounds-read-vulnerability-in-25d366e7ae1a02be 2026-10-28T23:29:59.482Z weekly 0.7 https://radar.offseq.com/threat/libraw-through-0222-contains-a-heap-based-out-of-bounds-read-in-librawparsenikonmakernote-that-allows-520afb7e55a8da4d 2026-10-28T23:29:54.959Z weekly 0.7 https://radar.offseq.com/threat/unarr-through-111-contains-an-off-by-one-heap-based-buffer-overflow-in-targetname-in-tarparse-tarc-5faab3a3b37bf619 2026-10-28T23:29:49.758Z weekly 0.7 https://radar.offseq.com/threat/unarr-through-111-contains-a-heap-based-out-of-bounds-read-in-zipparseextrafields-in-zipparse-zipc-due-53b2127048685dfe 2026-10-28T23:29:45.988Z weekly 0.7 https://radar.offseq.com/threat/nifticlib-nifticlib-through-301-contains-a-stack-based-out-of-bounds-read-and-write-vulnerability-in-a5723830a82d1142 2026-10-28T23:29:42.552Z weekly 0.7 https://radar.offseq.com/threat/snap7-through-143-contains-an-out-of-bounds-write-vulnerability-in-tsnap7microclientopreadarea-that-fd21fa559db78adc 2026-10-28T23:27:17.466Z weekly 0.8 https://radar.offseq.com/threat/freerdp-from-3300-before-3320-contains-a-resource-exhaustion-vulnerability-in-the-rdpecam-client-that-73d2523538cdc08d 2026-10-28T23:29:38.442Z weekly 0.7 https://radar.offseq.com/threat/freerdp-from-3300-before-3320-contains-a-heap-out-of-bounds-read-vulnerability-in-the-windows-clients-4180b51d714e07c0 2026-10-28T23:29:35.012Z weekly 0.7 https://radar.offseq.com/threat/freerdp-from-200-before-3320-contains-an-unbounded-reassembly-vulnerability-in-wtsprocesschanneldata-f82361762a8dd548 2026-10-28T23:29:27.802Z weekly 0.7 https://radar.offseq.com/threat/freerdp-from-300-before-3320-contains-an-uncontrolled-resource-consumption-vulnerability-in-c9ddb2661437dc2f 2026-10-28T23:27:14.261Z weekly 0.8 https://radar.offseq.com/threat/freerdp-before-3320-contains-a-heap-buffer-overflow-vulnerability-in-persistentcachereadentryv3-that-c714aaf6999b8014 2026-10-28T23:27:08.239Z weekly 0.8 https://radar.offseq.com/threat/freerdp-from-3290-before-3320-contains-an-integer-overflow-in-the-apple-audin-backends-audinmacm-fda46a0c4228dc6d 2026-10-28T23:27:01.667Z weekly 0.8 https://radar.offseq.com/threat/freerdp-before-3320-contains-a-heap-buffer-overflow-vulnerability-in-persistentcachereadentryv2-that-29243139f6dca710 2026-10-28T23:26:55.163Z weekly 0.8 https://radar.offseq.com/threat/freerdp-before-3320-contains-a-client-side-heap-out-of-bounds-write-vulnerability-in-c3d90d77e742a931 2026-10-28T23:26:48.734Z weekly 0.8 https://radar.offseq.com/threat/the-fanxfingerprint-function-in-sslsslxprintc-of-ssldump-allocates-a-heap-buffer-for-formatting-cve-acce565049c0262e 2026-10-28T23:28:46.149Z weekly 0.7 https://radar.offseq.com/threat/node-follow-redirects-follow-redirects-is-a-nodejs-http-and-https-client-wrapper-that-cve-2026-111756-5af164677d5d0c3c 2026-10-28T23:26:40.730Z weekly 0.8 https://radar.offseq.com/threat/libdbi-perl-dbi-versions-before-1656-for-perl-hang-on-a-later-open-of-a-dbddbm-table-because-a-cve-c912753f0dfea626 2026-10-28T23:28:41.047Z weekly 0.7 https://radar.offseq.com/threat/golang-124-on-most-platforms-go-uses-the-given-system-root-certificates-cve-2026-111943-e8c5e0e74212a67f 2026-10-28T23:28:35.903Z weekly 0.7 https://radar.offseq.com/threat/node-webpack-in-versions-before-527-and-in-version-600-when-a-proxy-entry-is-configured-to-forward-627245ea2c4f9c96 2026-10-28T23:13:48.540Z weekly 0.8 https://radar.offseq.com/threat/libimager-perl-imagerfilegif-versions-before-1006-for-perl-allow-out-of-bounds-reads-when-cve-2026-e2be6f2b7a68ee03 2026-10-28T23:28:31.672Z weekly 0.7 https://radar.offseq.com/threat/vite-prior-to-644-737-816-824-and-833-applications-using-custom-middleware-are-vulnerable-when-they-96cd0189cd09e39d 2026-10-28T23:28:26.597Z weekly 0.7 https://radar.offseq.com/threat/vite-prior-to-644-737-816-824-and-833-import-analysis-can-record-a-root-relative-browser-url-in-3cfb92d037157440 2026-10-28T23:28:23.082Z weekly 0.7 https://radar.offseq.com/threat/vite-from-820-until-824-and-833-the-first-4-bytes-of-files-outside-of-serverfs-setting-can-be-returned-7aa4286cb646b4cf 2026-10-28T23:28:18.756Z weekly 0.7 https://radar.offseq.com/threat/coin3-libexpat-272-through-290-contains-a-denial-of-service-vulnerability-because-xmlparserreset-9dc44c11cc1dc975 2026-10-28T23:28:14.282Z weekly 0.7 https://radar.offseq.com/threat/mozjs52-incorrect-boundary-conditions-in-the-svg-component-cve-2026-113399-dfac5aee624b93d8 2026-10-28T23:28:07.962Z weekly 0.7 https://radar.offseq.com/threat/inefficient-algorithmic-complexity-vulnerability-in-the-header-integer-parser-of-mtrudel-bandit-allows-961c6f39b8515bd2 2026-10-28T23:13:43.915Z weekly 0.8 https://radar.offseq.com/threat/libmozilla-ca-perl-mozillaca-versions-before-20261020-for-perl-provide-a-ca-certificate-bundle-cve-88d94d11c4d16171 2026-10-28T23:28:00.389Z weekly 0.7 https://radar.offseq.com/threat/thunderbird-did-not-escape-attribute-values-when-serializing-outgoing-xmpp-stanzas-cve-2026-113867-ac4ce21dc48ccb15 2026-10-28T23:27:55.395Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-websocket-fragment-f5cc04e4141902ab 2026-10-28T23:13:39.470Z weekly 0.8 https://radar.offseq.com/threat/inconsistent-interpretation-of-http-requests-http-requestresponse-smuggling-vulnerability-in-the-982779a5ffb7cacc 2026-10-28T23:27:47.734Z weekly 0.7 https://radar.offseq.com/threat/node-webpack-in-versions-from-510-before-527-and-in-version-600-the-unauthenticated-open-editor-350a01288fc8ee0e 2026-10-28T23:27:43.736Z weekly 0.7 https://radar.offseq.com/threat/python27-tarfiletarfilter-could-be-bypassed-using-crafted-link-entries-including-symlinks-with-empty-or-f2e86374c9681d1c 2026-10-28T23:27:39.443Z weekly 0.7 https://radar.offseq.com/threat/python-opentelemetry-opentelemetry-python-provides-the-python-api-and-sdk-for-opentelemetry-cve-2026-f56bbdc03d2edfb6 2026-10-28T23:27:34.426Z weekly 0.7 https://radar.offseq.com/threat/dnspython-is-a-dns-toolkit-for-python-cve-2026-114605-c9ceca81a2a1f2d2 2026-10-28T23:13:35.127Z weekly 0.8 https://radar.offseq.com/threat/pylint-is-a-static-code-analyser-for-python-cve-2026-114608-936bf040675f4bb4 2026-10-28T23:27:30.946Z weekly 0.7 https://radar.offseq.com/threat/python-authlib-from-013-until-180-authlibcommonsecurityissecuretransport-uses-a-textual-prefix-71387578ddf1394e 2026-10-28T23:27:26.525Z weekly 0.7 https://radar.offseq.com/threat/python-authlib-from-131-until-190-octkeyimportkey-checks-asymmetric-key-markers-only-at-byte-zero-while-b7c34486d79bdc5a 2026-10-28T23:13:30.228Z weekly 0.8 https://radar.offseq.com/threat/python-authlib-prior-to-191-authlibs-octkeyimportkey-and-hmac-signing-and-verification-path-cve-2026-db699d5358642171 2026-10-28T23:12:10.400Z weekly 0.8 https://radar.offseq.com/threat/python-authlib-prior-to-190-openidmixinparseidtoken-reads-the-noncesupported-decision-from-the-de4fdf0e46e51dbb 2026-10-28T23:15:13.727Z weekly 0.7 https://radar.offseq.com/threat/python-authlib-prior-to-190-the-default-rfc-7523-jwtbearergrantgetaudiences-returns-an-empty-list-0dcfdf367e449e39 2026-10-28T23:15:09.576Z weekly 0.7 https://radar.offseq.com/threat/python-authlib-prior-to-190-openidimplicitgrantvalidateauthorizationrequest-checks-the-client-3eabc49fd54a41db 2026-10-28T23:15:04.791Z weekly 0.7 https://radar.offseq.com/threat/python-authlib-prior-to-190-authlibs-rfc-9101-jwtauthenticationrequest-passes-the-unauthenticated-d4b53a5a16070791 2026-10-28T23:14:59.973Z weekly 0.7 https://radar.offseq.com/threat/mongo-c-driver-a-32-bit-integer-wraparound-in-the-mongodb-c-drivers-windows-only-kerberossspi-2e7f0cf7b325a6a1 2026-10-28T23:14:54.981Z weekly 0.7 https://radar.offseq.com/threat/libmongocrypt-builds-requests-to-external-key-management-services-aws-azure-and-gcp-by-inserting-1f62ceca1341913d 2026-10-28T23:14:50.491Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-gnu-patch-an-attacker-can-achieve-arbitrary-file-creation-outside-the-intended-16be39378b2cfb20 2026-10-28T23:14:45.801Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-freeipa-an-improper-authorization-check-allows-an-authenticated-host-to-retrieve-d6094b5c9c5688b8 2026-10-28T23:14:38.742Z weekly 0.7 https://radar.offseq.com/threat/allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http2-request-body-reader-of-61fd754efb174708 2026-10-28T23:12:06.087Z weekly 0.8 https://radar.offseq.com/threat/fzf-0360-through-0745-contains-an-inefficient-algorithmic-complexity-vulnerability-in-847ebe94de0bee52 2026-10-28T23:14:31.774Z weekly 0.7 https://radar.offseq.com/threat/libyang-through-6413-contains-an-uninitialized-pointer-free-vulnerability-in-lydxmlenvnetconfrpc-in-6925b8504c6d0b5c 2026-10-28T23:14:26.960Z weekly 0.7 https://radar.offseq.com/threat/mistune-before-330-contains-an-inefficient-algorithmic-complexity-vulnerability-in-parselinktext-that-c0b36598aab2b8c1 2026-10-28T23:12:02.519Z weekly 0.8 https://radar.offseq.com/threat/mistune-from-300-before-330-contains-an-algorithmic-complexity-vulnerability-in-the-inline-link-parsers-75c727c30bb020af 2026-10-28T23:11:58.148Z weekly 0.8 https://radar.offseq.com/threat/mistune-from-300-before-330-contains-an-algorithmic-complexity-denial-of-service-vulnerability-in-the-104e040ce408996c 2026-10-28T23:11:54.302Z weekly 0.8 https://radar.offseq.com/threat/mistune-before-330-contains-a-cross-site-scripting-vulnerability-in-the-include-directive-that-emits-d0b5c6e600f7b0ce 2026-10-28T23:14:22.673Z weekly 0.7 https://radar.offseq.com/threat/mistune-from-321-before-330-contains-a-css-injection-vulnerability-that-allows-attackers-controlling-b290d905a4121e45 2026-10-28T23:13:15.330Z weekly 0.7 https://radar.offseq.com/threat/mistune-before-330-contains-an-algorithmic-complexity-vulnerability-in-the-inline-link-parser-that-f9ad2b0ae654d41c 2026-10-28T23:11:51.128Z weekly 0.8 https://radar.offseq.com/threat/mistune-before-330-contains-a-path-traversal-vulnerability-in-the-rst-include-directive-that-allows-7b73bf2302ab6bc9 2026-10-28T23:11:47.018Z weekly 0.8 https://radar.offseq.com/threat/mistune-before-330-contains-a-path-traversal-vulnerability-in-the-opt-in-include-directive-that-allows-72df069af4af6456 2026-10-28T23:13:11.944Z weekly 0.7 https://radar.offseq.com/threat/mistune-before-330-contains-a-path-traversal-vulnerability-in-the-include-directive-that-allows-ce3ed38ec3d1c512 2026-10-28T23:11:42.692Z weekly 0.8 https://radar.offseq.com/threat/incus-605-before-607-6120-before-702-and-710-before-750-contains-a-restriction-bypass-vulnerability-8d7b8ae805158272 2026-10-28T23:13:07.909Z weekly 0.7 https://radar.offseq.com/threat/incus-603-before-607-660-before-702-and-710-before-750-contains-an-improper-authorization-vulnerability-51a6436a510ef6c0 2026-10-28T22:59:03.561Z weekly 0.8 https://radar.offseq.com/threat/incus-from-730-before-750-contains-a-project-restriction-bypass-that-allows-restricted-project-users-d60bdf493d76b926 2026-10-28T22:58:59.592Z weekly 0.8 https://radar.offseq.com/threat/incus-before-607-610-before-702-and-710-before-750-contains-a-missing-authorization-vulnerability-in-3a5702b7e11ffd48 2026-10-28T23:13:02.410Z weekly 0.7 https://radar.offseq.com/threat/incus-700-before-702-and-710-before-750-contains-a-signature-verification-flaw-in-its-built-in-s3-2f33d9f2ac54cf3c 2026-10-28T22:58:54.782Z weekly 0.8 https://radar.offseq.com/threat/incus-700-before-702-and-710-before-750-contains-a-path-traversal-vulnerability-that-allows-clients-ea1e5153e7926436 2026-10-28T22:58:49.878Z weekly 0.9 https://radar.offseq.com/threat/incus-701-before-702-and-720-before-750-contains-an-authorization-bypass-vulnerability-that-allows-92c082e1d4a936d6 2026-10-28T22:58:45.773Z weekly 0.8 https://radar.offseq.com/threat/incus-before-607-610-before-702-and-710-before-750-contains-an-arbitrary-file-write-vulnerability-that-911873f9178c7c71 2026-10-28T22:58:42.087Z weekly 0.9 https://radar.offseq.com/threat/incus-before-607-610-before-702-and-710-before-750-contains-an-arbitrary-file-write-vulnerability-in-98eb76b9dff8f218 2026-10-28T23:12:57.477Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-4700-before-4804-and-4900-before-4902-contains-a-missing-gc-rooting-29b368ace9ba4b86 2026-10-28T23:12:52.692Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-before-36017-3700-before-4804-and-4900-before-4902-contains-a-denial-of-service-79d8f8436df3c31e 2026-10-28T23:12:49.189Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-before-36017-3700-before-4804-and-4900-before-4902-contains-an-unbounded-memory-ab65d036e79085ac 2026-10-28T23:12:45.808Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-4600-before-4804-and-4900-before-4902-contains-a-denial-of-service-cb8f35a40ec47620 2026-10-28T23:12:42.671Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-4700-before-4804-and-4900-before-4902-contains-an-improper-validation-04c22117859aff45 2026-10-28T23:12:39.397Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-3900-before-4804-and-4900-before-4902-contains-a-stack-buffer-overflow-5b2942c89346d281 2026-10-28T22:58:38.361Z weekly 0.9 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-4600-before-4804-and-4900-before-4902-contains-a-denial-of-service-b4a8a2376568a43f 2026-10-28T23:12:35.738Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-before-36017-3700-before-4804-and-4900-before-4902-contains-an-information-e2a8580b2896fefa 2026-10-28T23:12:32.827Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-before-36016-3700-before-4803-and-4900-before-4901-contains-a-denial-of-service-2cb19d1341d33f86 2026-10-28T23:12:28.579Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-wasi-http-in-wasmtime-before-36016-3700-before-4803-and-4900-before-4901-does-eb3c78c13269592a 2026-10-28T23:12:24.575Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-before-36016-3700-before-4803-and-4900-before-4901-does-not-adequately-account-4ff70a57aff5d514 2026-10-28T23:12:20.992Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-4700-before-4803-and-4900-before-4901-contains-a-fuel-accounting-cve-2026-115390-2ff267da08ea3cea 2026-10-28T23:12:17.388Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-4600-before-4603-and-4700-before-4704-contains-an-uncontrolled-resource-76d78bb0efeb9b8b 2026-10-28T23:12:13.643Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-before-24013-2500-before-36014-3700-before-4603-and-4700-before-4704-allows-a-d6f5fdb7371aa597 2026-10-28T22:57:19.874Z weekly 0.8 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-before-24012-2500-before-36013-3700-before-4602-and-4700-before-4703-contains-47a7d1ad8d864edf 2026-10-28T23:00:25.775Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-libslirp-when-handling-icmp-echo-requests-the-reply-length-is-not-updated-to-cve-30f0a3f483e829d5 2026-10-28T23:00:21.628Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-the-iscsiuio-component-of-open-iscsi-cve-2026-115484-410ac3a2574440f9 2026-10-28T22:57:15.798Z weekly 0.8 https://radar.offseq.com/threat/a-flaw-was-found-in-the-iscsiuio-component-of-open-iscsi-cve-2026-115485-806f7783e5861bc6 2026-10-28T23:00:13.416Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-the-iscsiuio-component-of-open-iscsi-cve-2026-115486-f68afb30f9aadca8 2026-10-28T22:57:06.733Z weekly 0.8 https://radar.offseq.com/threat/cfitsio-through-470-contains-an-out-of-bounds-write-vulnerability-in-ffgcls2-in-getcolsc-that-trusts-4653879d1a17f815 2026-10-28T22:56:58.009Z weekly 0.8 https://radar.offseq.com/threat/libsmb2-before-63-contains-integer-overflow-vulnerabilities-in-the-dcerpc-ndr-decoder-in-libdcerpcc-02bbed944dd9f56e 2026-10-28T22:56:53.487Z weekly 0.8 https://radar.offseq.com/threat/python27-python-has-added-a-denylist-for-known-compromised-certificates-to-the-ssl-module-to-ensure-e7a29ad2932239e3 2026-10-28T22:56:49.713Z weekly 0.9 https://radar.offseq.com/threat/pypdf-prior-to-6212-an-attacker-can-craft-a-pdf-that-repeatedly-references-the-same-nonexistent-3c4a869cebf69dde 2026-10-28T22:56:45.113Z weekly 0.8 https://radar.offseq.com/threat/pypdf-prior-to-6212-an-attacker-can-craft-a-pdf-with-a-standard-cross-reference-table-whose-declared-7b75d76ff27210d3 2026-10-28T22:56:40.740Z weekly 0.8 https://radar.offseq.com/threat/pypdf-prior-to-6212-an-incomplete-remediation-for-repeated-malformed-cross-reference-entries-in-53c220d304e4c608 2026-10-28T22:44:23.662Z weekly 0.8 https://radar.offseq.com/threat/python-virtualenv-from-21149-until-211413-the-bash-binactivate-script-can-copy-an-attacker-controlled-28a4284deec59e70 2026-10-28T22:44:19.650Z weekly 0.8 https://radar.offseq.com/threat/openstack-ironic-through-3901-allows-a-denial-of-service-via-a-configdrive-that-results-in-a-very-1868522d2a5e6bcb 2026-10-28T23:00:01.244Z weekly 0.7 https://radar.offseq.com/threat/rply-through-114-contains-an-improper-array-index-validation-vulnerability-in-plyreadheaderproperty-fc91fc8591ef7493 2026-10-28T22:59:58.047Z weekly 0.7 https://radar.offseq.com/threat/snap7-through-143-contains-an-out-of-bounds-write-vulnerability-in-the-passive-partner-that-allows-a-e4b5049defebd6f4 2026-10-28T22:44:15.419Z weekly 0.8 https://radar.offseq.com/threat/node-i18next-http-backend-i18next-http-backend-402-contains-an-incomplete-fix-in-interpolateurl-that-aff92a58d8a98a5e 2026-10-28T22:59:55.146Z weekly 0.7 https://radar.offseq.com/threat/node-serialize-javascript-serialize-javascript-from-701-before-713-contains-a-cross-site-scripting-30a34b45f706d128 2026-10-28T22:59:50.964Z weekly 0.7 https://radar.offseq.com/threat/prior-to-26100rc1-twistedmailimap4imap4server-reaches-twistedmailimap4parsenestedparens-with-a-negative-64c6c131e954bb66 2026-10-28T22:59:46.262Z weekly 0.7 https://radar.offseq.com/threat/prior-to-26100rc1-the-twistedwordsxishdomish-expatelementstream-parser-allows-an-unauthenticated-a597b5e25a160714 2026-10-28T22:44:11.481Z weekly 0.8 https://radar.offseq.com/threat/prior-to-26100rc1-twistedwordsprotocolsircircdatareceived-retains-all-bytes-received-without-a-line-9f43c7656ca1302a 2026-10-28T22:44:06.896Z weekly 0.8 https://radar.offseq.com/threat/prior-to-26100rc1-twistedconchtelnettelnetdatareceived-appends-every-byte-received-after-iac-sb-to-a-1b41ac041565e303 2026-10-28T22:44:01.982Z weekly 0.8 https://radar.offseq.com/threat/hashicorp-consul-and-consul-enterprise-are-vulnerable-to-an-authorization-bypass-in-health-check-f648b2ac3b30e077 2026-10-28T22:59:41.179Z weekly 0.7 https://radar.offseq.com/threat/starman-versions-before-04019-for-perl-allow-a-stalled-request-body-to-hold-a-worker-indefinitely-cve-bc99404ce97e81ac 2026-10-28T22:59:37.195Z weekly 0.7 https://radar.offseq.com/threat/starman-versions-before-04019-for-perl-allow-cpu-exhaustion-via-quadratic-regex-backtracking-when-cve-c724e6e6d90b6b3d 2026-10-28T22:59:33.450Z weekly 0.7 https://radar.offseq.com/threat/starman-versions-before-04019-for-perl-send-response-bodies-for-head-requests-desynchronizing-cve-2026-7982bd3d6f38313b 2026-10-28T22:59:29.940Z weekly 0.7 https://radar.offseq.com/threat/starman-versions-before-04019-for-perl-allow-memory-exhaustion-via-unbounded-buffering-of-chunked-cve-cf15d1a98e114a8a 2026-10-28T22:59:26.027Z weekly 0.7 https://radar.offseq.com/threat/connman-through-20-has-a-stack-based-buffer-overflow-via-a-dhcpv6-reply-message-cve-2026-115863-0fdd3ca39034074b 2026-10-28T22:43:57.250Z weekly 0.8 https://radar.offseq.com/threat/prior-to-26100rc1-twistedwebhttphttpchannelheaderreceived-rejects-a-nul-byte-in-an-http-header-value-743aab2f349901fb 2026-10-28T22:59:22.875Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-is-a-runtime-for-webassembly-cve-2026-115889-7d9262756d2faebb 2026-10-28T22:43:49.862Z weekly 0.9 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-is-a-runtime-for-webassembly-cve-2026-115892-aaf3b0cbf153e31b 2026-10-28T22:58:29.606Z weekly 0.7 https://radar.offseq.com/threat/rust-wasmtime-wasmtime-is-a-runtime-for-webassembly-cve-2026-115893-77eea3aceda64632 2026-10-28T22:42:11.637Z weekly 0.9 https://radar.offseq.com/threat/rust-zip-through-904-ziparchive-treats-central-directory-file-header-filenames-as-authoritative-while-85f6098d06b9ba56 2026-10-28T22:42:07.073Z weekly 0.9 https://radar.offseq.com/threat/rust-zip-from-060-until-900-the-aes-entry-reader-in-srcaesrs-verifies-its-hmac-only-when-the-cve-2026-62fb6016cba72b93 2026-10-28T22:58:25.941Z weekly 0.7 https://radar.offseq.com/threat/rust-zip-from-510-until-900-applications-built-with-the-legacy-zip-feature-can-reserve-output-capacity-69ee4bc41dd82223 2026-10-28T22:42:03.731Z weekly 0.8 https://radar.offseq.com/threat/rust-zip-from-720-until-900-ziparchiveextract-and-ziparchiveextractunwrappedrootdir-use-safepreparepath-996eb06bbd6ae931 2026-10-28T22:41:59.224Z weekly 0.8 https://radar.offseq.com/threat/rust-zip-from-130-until-900-ziparchiveextract-in-srcreadmodrs-calls-vecwithcapacity-for-a-symbolic-link-143cda3aef96236b 2026-10-28T22:41:55.024Z weekly 0.8 https://radar.offseq.com/threat/social-auth-core-python-social-auth-is-a-social-authentication-and-registration-mechanism-cve-2026-7ad660142a53936d 2026-10-28T22:58:20.671Z weekly 0.7 https://radar.offseq.com/threat/open-neural-network-exchange-onnx-is-an-open-standard-for-machine-learning-interoperability-cve-2026-20a9513a71c45983 2026-10-28T22:58:16.567Z weekly 0.7 https://radar.offseq.com/threat/open-neural-network-exchange-onnx-is-an-open-standard-for-machine-learning-interoperability-cve-2026-326d6eabf590f5b4 2026-10-28T22:58:11.928Z weekly 0.7 https://radar.offseq.com/threat/open-neural-network-exchange-onnx-is-an-open-standard-for-machine-learning-interoperability-cve-2026-98f7e74303923f0f 2026-10-28T22:58:07.080Z weekly 0.7 https://radar.offseq.com/threat/open-neural-network-exchange-onnx-is-an-open-standard-for-machine-learning-interoperability-cve-2026-0cbb78f342c94a13 2026-10-28T22:58:02.897Z weekly 0.7 https://radar.offseq.com/threat/lua-nginx-dns-openresty-lua-resty-dns-before-024-contains-an-improper-input-validation-vulnerability-in-c18760534c8a8a62 2026-10-28T22:57:57.726Z weekly 0.7 https://radar.offseq.com/threat/open62541-150-before-157-contains-an-integer-overflow-in-uadatatypefromstructuredescription-that-wraps-101f23b4ca58bbd0 2026-10-28T22:41:51.697Z weekly 0.8 https://radar.offseq.com/threat/a-weakness-has-been-identified-in-ggml-org-llamacpp-cve-2026-116096-7ae7b596ecefc416 2026-10-28T22:57:54.289Z weekly 0.7 https://radar.offseq.com/threat/a-security-vulnerability-has-been-detected-in-gnome-libgsf-up-to-11460-cve-2026-116124-96df6a02c963797f 2026-10-28T22:57:50.605Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-incorrectly-parses-delegate-invocations-which-can-928c2a87b4df0159 2026-10-28T22:57:46.030Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-712-33-contains-a-policy-bypass-vulnerability-in-the-uhdr-decoder-that-allows-a6f0af30325d64be 2026-10-28T22:57:40.149Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-712-33-contains-a-heap-buffer-over-read-vulnerability-that-allows-attackers-to-read-10d6ec65a52e0824 2026-10-28T22:57:37.340Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-policy-bypass-in-the-ps-pdf-and-xps-9ccc56e7be015c46 2026-10-28T22:57:34.435Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-uncontrolled-recursion-in-the-mvg-cve-2026-94769977f265d699 2026-10-28T22:57:30.487Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-32-contains-a-security-policy-bypass-caused-by-an-fafd937b9496a8b7 2026-10-28T22:57:27.297Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-memory-leak-in-the-msl-decoder-that-fails-1973a63b8ab8f604 2026-10-28T22:57:23.530Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-null-pointer-dereference-in-the-djvu-2f56900ccaa5297c 2026-10-28T22:45:28.039Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-an-injection-vulnerability-in-the-mvg-encoder-9f69fa450d5b18bc 2026-10-28T22:45:24.464Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-stack-based-buffer-overflow-in-the-cve-2026-35a5a688f7e5eb58 2026-10-28T22:41:48.381Z weekly 0.8 https://radar.offseq.com/threat/imagemagick-before-712-33-contains-a-memory-leak-vulnerability-in-the-fpx-encoder-that-allows-e824b124de71b4d9 2026-10-28T22:45:20.853Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-memory-leak-in-the-jng-encoder-that-fails-7c3c296957b009c6 2026-10-28T22:45:17.729Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-712-33-contains-a-memory-leak-vulnerability-in-the-mat-decoder-that-fails-to-cve-44d4d37dedffa2c4 2026-10-28T22:45:14.236Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-712-33-contains-a-heap-buffer-overflow-vulnerability-on-32-bit-systems-that-allows-eaf375c584e4bc3f 2026-10-28T22:45:11.188Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-memory-leak-in-its-xml-parsing-code-where-852c073499654998 2026-10-28T22:45:08.236Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-memory-leak-in-the-handling-of-xmp-cve-2026-316632ef53a5ef0e 2026-10-28T22:45:04.682Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-memory-leak-caused-by-a-missing-cve-2026-5883213a9a36ee19 2026-10-28T22:44:58.947Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-712-33-contains-a-memory-leak-vulnerability-in-perlmagick-that-fails-to-free-cve-95f9c8141447fd17 2026-10-28T22:44:55.686Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-712-33-contains-a-memory-leak-vulnerability-in-the-magick-compare-command-cve-2026-f6d0659c6c6d81c7 2026-10-28T22:44:53.072Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-memory-leak-in-the-handling-of-the-cdl-color-43039f0e00fb2559 2026-10-28T22:44:46.810Z weekly 0.7 https://radar.offseq.com/threat/imagemagick-before-6913-58-and-7x-before-712-33-contains-a-heap-based-buffer-overflow-in-the-x11-08f2daa6fb695fd9 2026-10-28T22:44:43.586Z weekly 0.7 https://radar.offseq.com/threat/rclone-from-v1680-before-v1752-contains-an-authorization-bypass-vulnerability-in-serve-s3-auth-proxy-385d130d7581d97a 2026-10-28T22:44:40.398Z weekly 0.7 https://radar.offseq.com/threat/rclone-serve-s3-versions-1750-before-1752-contain-an-integer-overflow-vulnerability-in-multipart-0fddbe5f9646dbae 2026-10-28T22:44:36.565Z weekly 0.7 https://radar.offseq.com/threat/rclone-from-1550-before-1752-contains-a-signature-verification-bypass-in-stable-selfupdate-that-trusts-c840e05e1cdfd655 2026-10-28T22:41:41.958Z weekly 0.8 https://radar.offseq.com/threat/rclone-from-v1560-before-v1752-contains-an-information-disclosure-vulnerability-in-the-webdav-backend-be713355c651b985 2026-10-28T22:44:33.190Z weekly 0.7 https://radar.offseq.com/threat/rclone-before-1752-contains-a-path-traversal-vulnerability-in-serve-webdav-that-allows-unauthenticated-3a2802987fc8e6bc 2026-10-28T22:33:05.435Z weekly 0.8 https://radar.offseq.com/threat/rclone-from-137-before-1742-contains-a-server-side-request-forgery-vulnerability-that-allows-bf5cb14680bd0487 2026-10-28T22:43:24.572Z weekly 0.7 https://radar.offseq.com/threat/rclone-from-1640-before-1752-contains-an-authentication-bypass-vulnerability-in-serve-webdav-that-lets-1d742c67f75863e4 2026-10-28T22:43:21.003Z weekly 0.7 https://radar.offseq.com/threat/rclone-from-1520-before-1752-contains-a-cross-site-request-forgery-vulnerability-in-the-pcloud-99dbc48098ffda9a 2026-10-28T22:43:17.845Z weekly 0.7 https://radar.offseq.com/threat/rclone-before-1752-contains-a-path-traversal-vulnerability-in-the-local-backends-translatelink-71ea1d69f9f61761 2026-10-28T22:43:14.554Z weekly 0.7 https://radar.offseq.com/threat/rclone-before-v1752-contains-a-credential-exposure-vulnerability-in-the-b2-backend-that-leaks-the-live-897f0fa502bd7934 2026-10-28T22:43:09.058Z weekly 0.7 https://radar.offseq.com/threat/dolibarr-erp-crm-1900-before-2304-contains-an-sql-injection-vulnerability-that-allows-authenticated-8483bec7d626c4d3 2026-10-28T22:33:00.618Z weekly 0.8 https://radar.offseq.com/threat/dolibarr-erp-crm-before-2400-contains-an-os-command-injection-vulnerability-in-c63b91278c656c67 2026-10-28T22:32:57.229Z weekly 0.8 https://radar.offseq.com/threat/a-vulnerability-was-identified-in-libimobiledevice-up-to-140-cve-2026-116258-2b5f83c51594fa80 2026-10-28T22:43:04.325Z weekly 0.7 https://radar.offseq.com/threat/a-security-flaw-has-been-discovered-in-libimobiledevice-up-to-140-cve-2026-116259-7d258ded09e8c322 2026-10-28T22:42:59.382Z weekly 0.7 https://radar.offseq.com/threat/a-weakness-has-been-identified-in-libimobiledevice-up-to-140-cve-2026-116260-c08904bf7b2b80d3 2026-10-28T22:32:54.028Z weekly 0.8 https://radar.offseq.com/threat/a-security-vulnerability-has-been-detected-in-libimobiledevice-up-to-140-cve-2026-116261-a9ca25ade9f45512 2026-10-28T22:42:54.270Z weekly 0.7 https://radar.offseq.com/threat/a-vulnerability-was-detected-in-libimobiledevice-up-to-140-cve-2026-116262-2137961a8a8d9c03 2026-10-28T22:42:49.178Z weekly 0.7 https://radar.offseq.com/threat/a-security-flaw-has-been-discovered-in-ggml-org-llamacpp-up-to-070-cve-2026-116467-fd2713f8f1d5ac2a 2026-10-28T22:42:44.004Z weekly 0.7 https://radar.offseq.com/threat/objenesis-before-36-contains-a-type-confusion-vulnerability-that-allows-code-in-one-class-loader-to-595c9ca41d84e9e3 2026-10-28T22:42:40.796Z weekly 0.7 https://radar.offseq.com/threat/a-null-pointer-dereference-vulnerability-was-found-in-gssproxy-cve-2026-116497-b30cb4cb16034c8b 2026-10-28T22:42:37.484Z weekly 0.7 https://radar.offseq.com/threat/netty-netty-tcnative-before-2084final-contains-a-heap-buffer-overflow-vulnerability-in-the-4bbe8ace38fa457d 2026-10-28T22:42:33.324Z weekly 0.7 https://radar.offseq.com/threat/netty-tcnative-2066final-before-2084final-built-against-openssl-3x-contains-a-use-after-free-b75c41b092530fb9 2026-10-28T22:42:28.916Z weekly 0.7 https://radar.offseq.com/threat/netty-netty-tcnative-before-2084final-contains-a-denial-of-service-vulnerability-in-the-b0f922b12eeee914 2026-10-28T22:42:24.291Z weekly 0.7 https://radar.offseq.com/threat/netty-netty-tcnative-before-2084final-contains-an-sni-hostname-spoofing-vulnerability-that-allows-c8c65a235b88d3e6 2026-10-28T22:42:19.890Z weekly 0.7 https://radar.offseq.com/threat/snappy-java-is-a-java-port-of-the-snappy-a-fast-c-compresserdecompresser-developed-by-google-cve-2026-354399cb0ff5543d 2026-10-28T22:42:15.550Z weekly 0.7 https://radar.offseq.com/threat/gstreamer-editing-services10-a-flaw-was-found-in-gstreamer-editing-services-gst-editing-services-cve-79d84258a59dfa6a 2026-10-28T22:32:47.969Z weekly 0.8 https://radar.offseq.com/threat/a-security-vulnerability-has-been-detected-in-tencent-rapidjson-up-to-110-cve-2026-116620-db0ae4d84749e5d7 2026-10-28T22:32:42.872Z weekly 0.8 https://radar.offseq.com/threat/ipe-infinite-loop-in-xpdf-406-and-earlier-due-to-incorrect-validation-of-progression-order-field-cve-5282f5c02fbe3a22 2026-10-28T22:34:18.243Z weekly 0.7 https://radar.offseq.com/threat/gbsplay-through-00103-contains-an-out-of-bounds-read-vulnerability-in-mappermap-in-mapperc-that-fails-5ac7639c361916f4 2026-10-28T22:34:14.019Z weekly 0.7 https://radar.offseq.com/threat/gbsplay-through-00103-contains-a-heap-out-of-bounds-read-vulnerability-in-gbropen-in-gbsc-that-fails-91fd3c1efc48a3c6 2026-10-28T22:34:09.504Z weekly 0.7 https://radar.offseq.com/threat/gbsplay-through-00103-contains-a-heap-out-of-bounds-read-vulnerability-in-vgmopen-in-gbsc-that-walks-33899b64689b2a66 2026-10-28T22:34:05.042Z weekly 0.7 https://radar.offseq.com/threat/libfvde-through-20260923-contains-a-heap-out-of-bounds-read-vulnerability-in-26725eff8b29c723 2026-10-28T22:34:00.744Z weekly 0.7 https://radar.offseq.com/threat/libfvde-through-20260923-contains-a-heap-out-of-bounds-read-vulnerability-in-77ce497debffeaa9 2026-10-28T22:33:56.607Z weekly 0.7 https://radar.offseq.com/threat/furnace-through-0683-contains-an-out-of-bounds-heap-read-vulnerability-in-divengineloadftm-in-3ba55aad062238f1 2026-10-28T22:33:52.092Z weekly 0.7 https://radar.offseq.com/threat/furnace-through-0683-contains-an-out-of-bounds-write-vulnerability-in-divengineloadftm-that-allows-2c711d6611663cb9 2026-10-28T22:33:48.445Z weekly 0.7 https://radar.offseq.com/threat/libpff-through-20260926-contains-an-off-by-one-bounds-check-in-libpfftableread6crecordentries-that-d7f800e13e214c18 2026-10-28T22:33:44.464Z weekly 0.7 https://radar.offseq.com/threat/libpff-through-20260926-contains-a-heap-out-of-bounds-read-vulnerability-in-libpfftablereadvaluesarray-a3d66e4e32a96a52 2026-10-28T22:33:39.838Z weekly 0.7 https://radar.offseq.com/threat/libphdi-through-20260902-contains-a-heap-out-of-bounds-read-vulnerability-in-07b24d49e8a27a8b 2026-10-28T22:33:35.973Z weekly 0.7 https://radar.offseq.com/threat/speex-libspeex-through-121-contains-an-out-of-bounds-write-vulnerability-in-speexbitsreadwholebytes-in-30e5031192edd71c 2026-10-28T22:33:32.512Z weekly 0.7 https://radar.offseq.com/threat/htslib-through-124-contains-a-heap-out-of-bounds-write-and-read-vulnerability-in-bgzfindexloadhfile-in-2337bce0488d6cfc 2026-10-28T22:33:28.369Z weekly 0.7 https://radar.offseq.com/threat/libyal-libmsiecf-through-20260525-contains-a-double-free-vulnerability-in-libmsiecfurlvaluesreaddata-0f90843c584eaaec 2026-10-28T22:33:23.328Z weekly 0.7 https://radar.offseq.com/threat/ntop-ndpi-through-60-contains-an-out-of-bounds-read-vulnerability-in-dissectsoftetherhostfqdn-in-916762a76de73014 2026-10-28T22:33:18.837Z weekly 0.7 https://radar.offseq.com/threat/transmission-400-before-413-contains-a-permissive-cors-vulnerability-in-handlerequest-in-rpc-servercc-94a6dd5b6cf02929 2026-10-28T22:32:38.754Z weekly 0.8 https://radar.offseq.com/threat/llamacpp-b5899-before-b10261-contains-a-heap-out-of-bounds-write-vulnerability-in-c8ce02264d275cfd 2026-10-28T22:32:33.236Z weekly 0.8 https://radar.offseq.com/threat/llamacpp-b10398-before-b11301-contains-an-integer-overflow-vulnerability-in-ggufinitfromreader-that-0d70da341444d3f5 2026-10-28T22:33:14.271Z weekly 0.7 https://radar.offseq.com/threat/llamacpp-b5854-before-b11275-contains-an-integer-overflow-vulnerability-in-ggufinitfromreader-that-aeeec47cb83c6bc5 2026-10-28T22:33:10.389Z weekly 0.7 https://radar.offseq.com/threat/zdi-26-833-valkey-clustercreatepublishmsgblock-numeric-truncation-error-remote-code-execution-35ef1c9dec2e6126 2026-10-28T22:32:03.243Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-75520-cwe-22-path-traversal-in-domoticz-6b734d5cc24142e2 2026-10-28T22:44:27.419Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118578-information-disclosure-in-maotoumao-musicfreedesktop-a89fbe50a6e1e02f 2026-10-28T22:59:17.096Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-82411-cwe-639-authorization-bypass-through-user-controlled-key-in-maykinmedia-open-object-64a282a0bd76f9ef 2026-10-28T22:59:13.968Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-55561-cwe-639-authorization-bypass-through-user-controlled-key-in-invoiceplane-aa5061bc22817ca2 2026-10-28T22:59:08.349Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-85749-cwe-566-authorization-bypass-through-user-controlled-sql-primary-key-in-mailwatch-af11a66ec6ce3f5b 2026-10-28T22:58:34.809Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118579-backdoor-in-d-link-dir-505-bc3b2c9ce51cde6d 2026-10-28T23:13:27.040Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-86983-a-remote-attacker-may-be-able-to-terminate-a-process-that-passes-attacker-controlled-2c11265c0d0f1dc3 2026-10-28T23:14:17.617Z weekly 0.7 https://radar.offseq.com/threat/mettler-toledo-php2shell-in-octo-image-server-1e3aa2aa1f4c2a73 2026-10-28T23:13:24.029Z weekly 0.9 https://radar.offseq.com/threat/plugin-catalog-backend-backstage-catalog-rules-can-be-bypassed-for-url-locations-using-encoded-path-2a78cfc422152864 2026-10-28T23:14:15.106Z weekly 0.7 https://radar.offseq.com/threat/systeminformation-vulnerable-to-windows-command-injection-in-services-through-unicode-quotation-marks-917f59629619e664 2026-10-28T23:13:20.130Z weekly 0.8 https://radar.offseq.com/threat/crass-incorrect-tokenization-of-bad-urls-enables-css-sanitizer-bypass-cve-2026-116695-0aa98f582529aae5 2026-10-28T23:14:11.092Z weekly 0.7 https://radar.offseq.com/threat/tornado-quadratic-cpu-usage-when-parsing-http-headers-with-line-folding-cve-2026-116577-3482036cd7811a87 2026-10-28T23:14:01.874Z weekly 0.7 https://radar.offseq.com/threat/tornado-open-redirect-in-redirecthandler-via-protocol-relative-urls-cve-2026-116578-99b62347895dc2a7 2026-10-28T23:13:57.789Z weekly 0.7 https://radar.offseq.com/threat/tornado-event-loop-blocking-and-excess-memory-use-from-chunked-bodies-with-many-small-chunks-cve-2026-b9a8d800bb5d8423 2026-10-28T23:13:53.017Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118585-cross-site-scripting-in-configuroweb-inventariobasico-a7d3094957250b0f 2026-10-28T23:29:24.196Z weekly 0.7 https://radar.offseq.com/threat/http2shell-is-real-i-turned-one-wordpress-pingback-into-a-bash-shell-f6fa9946446bf724 2026-10-28T23:42:05.206Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118586-server-side-request-forgery-in-dfm-feedfinder2-87b13b95bb05095a 2026-10-28T23:44:34.947Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118589-uncontrolled-memory-allocation-in-nschloe-meshio-ebb2234a0674aa60 2026-10-28T23:59:25.831Z weekly 0.7 https://radar.offseq.com/threat/malicious-code-in-b20miner-npm-a75dfe3484516a5c 2026-10-29T00:29:16.204Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-113957-an-attacker-who-controls-the-registry-a-mirror-or-the-network-path-to-it-may-be-able-23f84c5010cf6871 2026-10-29T00:45:05.076Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-118590-uncontrolled-memory-allocation-in-nipy-nibabel-09ec76d04a95d0e4 2026-10-29T00:45:01.194Z weekly 0.7 https://radar.offseq.com/threat/xml-signature-wrapping-authentication-bypass-in-moldovas-mpass-saml-nuget-library-fixed-in-1004-cve-b04adee8c0e24dbc 2026-10-29T01:11:56.884Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-21157-cwe-20-improper-input-validation-in-samsung-mobile-bixby-c2420e41d2a12110 2026-10-29T01:26:40.094Z weekly 0.8 https://radar.offseq.com/threat/the-db-tools-rely-on-the-tls-implementation-in-golangs-standard-library-which-generally-uses-the-cve-52e816de77f8f880 2026-10-29T01:15:18.246Z weekly 0.7 https://radar.offseq.com/threat/a-vulnerability-was-found-in-a2ui-up-to-0104-cve-2026-118537-843673f298613e1a 2026-10-29T01:15:14.604Z weekly 0.7 https://radar.offseq.com/threat/cherrytree-through-172-contains-a-path-traversal-vulnerability-in-ctstoragexmlhelpercreateimagefromxml-da0cbb161e4608d4 2026-10-29T01:15:11.580Z weekly 0.7 https://radar.offseq.com/threat/cherrytree-through-172-contains-an-os-command-injection-vulnerability-in-ctactionslinkclicked-that-b5b08001b10e1d1f 2026-10-29T01:15:08.163Z weekly 0.8 https://radar.offseq.com/threat/a-vulnerability-was-determined-in-a2ui-project-a2ui-up-to-0120-cve-2026-118538-12f4d9c994501375 2026-10-29T01:15:04.724Z weekly 0.7 https://radar.offseq.com/threat/signal-k-server-before-2330-contains-a-missing-authentication-vulnerability-that-allows-69a9cb3685e1e7cd 2026-10-29T01:15:01.737Z weekly 0.9 https://radar.offseq.com/threat/xianyu-auto-reply-fix-through-207-contains-a-missing-authorization-vulnerability-in-the-post-send-c744a016b0e71b88 2026-10-29T01:14:58.653Z weekly 0.7 https://radar.offseq.com/threat/ovenmediaengine-through-0210-contains-a-denial-of-service-vulnerability-in-ovtpacketloadheader-that-aa2c652cf7dab60a 2026-10-29T01:14:51.507Z weekly 0.8 https://radar.offseq.com/threat/dolibarr-erp-crm-before-2402-contains-a-missing-authorization-vulnerability-in-b417a5d97e4d20e7 2026-10-29T01:14:48.221Z weekly 0.7 https://radar.offseq.com/threat/freeimage-danoli3-fork-before-31922-contains-a-heap-buffer-overflow-vulnerability-in-the-pbm-rle-181102b10baac26a 2026-10-29T01:14:44.997Z weekly 0.8 https://radar.offseq.com/threat/python-markdown2-through-255-contains-a-denial-of-service-vulnerability-that-allows-remote-users-to-c017f12232cb11a9 2026-10-29T01:14:12.063Z weekly 0.8 https://radar.offseq.com/threat/freeimage-danoli3-fork-before-31925-contains-a-heap-buffer-overflow-vulnerability-in-plugingifcpp-that-0ff808ec9d5fe16c 2026-10-29T01:14:09.360Z weekly 0.8 https://radar.offseq.com/threat/karingx-clashmi-through-10321801-disables-tls-certificate-validation-by-default-in-the-httputils-f5c515a39b66cdb6 2026-10-29T01:14:06.269Z weekly 0.8 https://radar.offseq.com/threat/bricks-theme-243-and-before-contains-an-unauthenticated-dynamic-data-tag-injection-vulnerability-that-ef01415036477873 2026-10-29T01:14:01.961Z weekly 0.8 https://radar.offseq.com/threat/piweb-disable-payment-method-partial-payment-for-woocommerce-before-11109-contains-a-missing-da4b0702405fc8ce 2026-10-29T01:14:41.062Z weekly 0.7 https://radar.offseq.com/threat/gopass-before-1170-contains-a-path-traversal-vulnerability-in-the-filesystem-storage-backend-that-5504bfc60715626c 2026-10-29T01:14:37.451Z weekly 0.7 https://radar.offseq.com/threat/bricks-builder-243-and-before-contains-a-broken-access-control-vulnerability-that-allows-dc72d71e801cf901 2026-10-29T01:13:59.094Z weekly 0.8 https://radar.offseq.com/threat/volmarg-personal-management-system-through-210-contains-an-os-command-injection-vulnerability-that-5fa94030c039ae1c 2026-10-29T01:13:55.693Z weekly 0.8 https://radar.offseq.com/threat/a-vulnerability-was-identified-in-maotoumao-musicfreedesktop-006007008-cve-2026-118577-4037ad9b8ac4e99b 2026-10-29T01:14:34.030Z weekly 0.7 https://radar.offseq.com/threat/a-weakness-has-been-identified-in-d-link-dir-505-110b02-cve-2026-118579-3434a71826170643 2026-10-29T01:13:52.905Z weekly 0.9 https://radar.offseq.com/threat/mattermost-versions-119x-1191-118x-1185-117x-11710-fail-to-validate-the-target-post-id-in-the-8a07a055e18d602b 2026-10-29T01:13:49.935Z weekly 0.8 https://radar.offseq.com/threat/a-security-flaw-has-been-discovered-in-maotoumao-musicfreedesktop-006007008-cve-2026-118578-f420d314273e17e5 2026-10-29T01:14:28.678Z weekly 0.7 https://radar.offseq.com/threat/a-vulnerability-was-identified-in-configuroweb-inventariobasico-cve-2026-118585-de4206f65474c814 2026-10-29T01:14:25.206Z weekly 0.7 https://radar.offseq.com/threat/a-security-flaw-has-been-discovered-in-dfm-feedfinder2-up-to-004-cve-2026-118586-dc845bacef0d0d33 2026-10-29T01:14:18.454Z weekly 0.7 https://radar.offseq.com/threat/a-weakness-has-been-identified-in-nschloe-meshio-up-to-535-cve-2026-118589-d67800df21595105 2026-10-29T01:14:15.269Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-113387-cwe-306-missing-authentication-for-critical-function-in-canva-ortto-2722e581560c0496 2026-10-29T02:02:12.845Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-113409-cwe-79-cross-site-scripting-in-canva-ortto-48ffd807c0e5f4b0 2026-10-29T02:02:12.553Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-114173-cwe-201-insertion-of-sensitive-information-into-sent-data-in-canva-ortto-4b2490061014140d 2026-10-29T02:02:12.706Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-16889-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-apereo-foundation-openequella-1c94a8c56edf4595 2026-10-29T02:02:13.700Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-66088-cwe-78-os-command-injection-in-apereo-foundation-openequella-0f357edf54f76fa6 2026-10-29T02:02:13.562Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-66089-cwe-611-improper-restriction-of-xml-external-entity-reference-in-apereo-foundation-eb6926c84a3c4ad1 2026-10-29T02:02:13.415Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-66090-cwe-611-improper-restriction-of-xml-external-entity-reference-in-apereo-foundation-289623797fd40e57 2026-10-29T02:02:13.278Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-66091-cwe-639-authorization-bypass-through-user-controlled-key-in-apereo-foundation-9d24341c023e3408 2026-10-29T02:02:13.127Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-66092-cwe-79-cross-site-scripting-in-apereo-foundation-openequella-caa8dfd028c18b78 2026-10-29T02:02:12.981Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118426-cwe-862-missing-authorization-in-octopus-deploy-octopus-server-0a15ff33b66894a9 2026-10-29T02:29:27.426Z weekly 0.7 https://radar.offseq.com/threat/threat-intel-in-right-click-5dce3bccb2b35a14 2026-10-29T02:42:05.325Z weekly 0.7 https://radar.offseq.com/threat/isc-stormcast-for-thursday-october-29th-2026-httpsiscsansedupodcastdetail10156-thu-oct-29th-fde8677e94cd9edd 2026-10-29T03:12:12.010Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-40063-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-frangoteam-767000a8c4d97f27 2026-10-29T03:14:53.680Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-42922-cwe-285-improper-authorization-in-frangoteam-frangoteam-d3c7b599b3bda516 2026-10-29T03:14:04.159Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-42949-cwe-285-improper-authorization-in-frangoteam-frangoteam-240e37dd5a19f4ad 2026-10-29T03:14:49.719Z weekly 0.7 https://radar.offseq.com/threat/apache-struts-2-rest-plugin-strutsparameter-checks-do-not-cover-jsonanysetter-22b07c9861202655 2026-10-29T03:13:01.381Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-109516-cwe-287-improper-authentication-in-guruteam-bot-for-telegram-on-woocommerce-292ec2d16c9aa743 2026-10-29T03:44:58.419Z weekly 0.9 https://radar.offseq.com/threat/cve-2026-93757-cwe-287-improper-authentication-in-wild-apricot-wild-apricot-login-bbe4aa001586ea81 2026-10-29T03:44:54.789Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-93855-cwe-89-sql-injection-in-brewlabs-sendpress-newsletters-6151d1c51078d3d4 2026-10-29T03:44:51.558Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-93904-cwe-89-sql-injection-in-dejanmarkovic-social-web-suite-social-media-auto-post-social-4e878ceee89e2ebd 2026-10-29T03:44:48.167Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-96228-cwe-287-improper-authentication-in-sslplugins-ssl-wireless-sms-notification-98024571b8ab69f0 2026-10-29T03:44:44.543Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-96666-cwe-79-cross-site-scripting-in-vberkel-schema-app-structured-data-718a3d4cb20724a8 2026-10-29T03:44:41.550Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-96669-cwe-79-cross-site-scripting-in-wpscripts-food-store-online-food-delivery-pickup-ea8d6fe53c90729d 2026-10-29T03:44:38.204Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-96741-cwe-79-cross-site-scripting-in-mlfactory-dsgvo-all-in-one-for-wp-6c4e98772932cf65 2026-10-29T03:44:34.600Z weekly 0.8 https://radar.offseq.com/threat/a-security-vulnerability-has-been-detected-in-nipy-nibabel-up-to-542-cve-2026-118590-539d963c5c98b66d 2026-10-29T04:28:55.521Z weekly 0.7 https://radar.offseq.com/threat/improper-input-validation-in-bixby-prior-to-version-40856-allows-privileged-local-attackers-to-cve-58e633fecf364a9e 2026-10-29T04:28:17.196Z weekly 0.8 https://radar.offseq.com/threat/the-ortto-plugin-for-wordpress-before-1025-did-not-escape-stored-settings-on-its-admin-settings-cve-a03ca096d59fa45d 2026-10-29T04:28:48.668Z weekly 0.7 https://radar.offseq.com/threat/the-ortto-plugin-for-wordpress-before-1025-did-not-authenticate-configuration-update-requests-cve-2026-06263d105e686a1b 2026-10-29T04:28:14.028Z weekly 0.8 https://radar.offseq.com/threat/the-ortto-plugin-for-wordpress-before-1025-did-not-filter-the-woocommerce-product-data-it-embedded-cve-6012f5cee584f264 2026-10-29T04:28:45.802Z weekly 0.7 https://radar.offseq.com/threat/in-openequella-before-20261-the-xml-parser-used-for-item-metadata-does-not-disable-external-entity-cve-ea5b181c3c5d129c 2026-10-29T04:28:11.175Z weekly 0.8 https://radar.offseq.com/threat/in-openequella-before-20261-the-systemexecute-function-available-to-the-scripting-engine-runs-supplied-b8bc6b1fae12ee97 2026-10-29T04:28:08.214Z weekly 0.9 https://radar.offseq.com/threat/in-openequella-before-20261-the-soap-api-parses-xml-supplied-in-the-stopedit-operation-with-a-cve-2026-1cd6e08be1abf0f8 2026-10-29T04:28:43.056Z weekly 0.7 https://radar.offseq.com/threat/in-openequella-before-20261-the-get-apiuserqueryuserinfobackup-endpoint-performs-no-cve-2026-66091-1830c84a6d561c8d 2026-10-29T04:28:39.656Z weekly 0.7 https://radar.offseq.com/threat/in-openequella-before-20261-the-pre-login-notice-image-upload-endpoint-put-apipreloginnoticeimagename-23b1f99bf246f20c 2026-10-29T04:28:36.411Z weekly 0.7 https://radar.offseq.com/threat/in-openequella-before-20262-the-pre-login-notice-is-stored-as-html-and-rendered-on-the-legacy-logon-9fe48edf56f4842b 2026-10-29T04:28:33.171Z weekly 0.7 https://radar.offseq.com/threat/a-flaw-was-found-in-dpdk-libvhost-cve-2026-86564-e982d9e0190647fc 2026-10-29T05:29:33.703Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-99100-wifi-p54-validate-firmware-record-lengths-in-linux-kernel-a40128c045a431b5 2026-10-29T05:29:28.336Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-93293-cwe-79-cross-site-scripting-in-saadiqbal-password-protected-protect-your-site-content-ea3a50f7cfdd43df 2026-10-29T05:43:30.839Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-118905-cwe-78-os-command-injection-in-nvm-sh-nvm-34e2e69f9edd4987 2026-10-29T05:43:05.189Z weekly 0.8 https://radar.offseq.com/threat/open-source-tool-for-unpacking-stripped-android-native-so-malware-static-registernatives-recovery-5c7dd2b27dbfcc47 2026-10-29T06:20:07.116Z weekly 0.7 https://radar.offseq.com/threat/deploying-a-local-ghidra-server-for-your-malware-analysis-lab-thu-oct-29th-609d0bc0fc5bd1a6 2026-10-29T06:20:17.375Z weekly 0.7 https://radar.offseq.com/threat/cve-2024-3586-cwe-79-cross-site-scripting-in-letterpress-8bd87439b26c29da 2026-10-29T06:00:23.500Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-103693-cwe-502-deserialization-of-untrusted-data-in-frontend-dashboard-ed0b74a31c0d2ba6 2026-10-29T06:00:23.681Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-105258-cwe-79-cross-site-scripting-in-appointment-booking-plugin-48b5e9a23975ce48 2026-10-29T06:00:23.853Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-108685-cwe-862-missing-authorization-in-wp-post-author-bd5455705f31f9fc 2026-10-29T06:00:24.033Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-108686-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-wp-post-author-ec4ad0f455628ef6 2026-10-29T06:00:24.208Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-108763-cwe-639-authorization-bypass-through-user-controlled-key-in-wallet-system-for-db173bbd60e9d36d 2026-10-29T06:00:24.396Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-110030-cwe-862-missing-authorization-in-hide-price-until-login-9fab4fcf60bf2ecf 2026-10-29T06:00:24.596Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-110504-cwe-79-cross-site-scripting-in-enable-svg-webp-and-ico-upload-c7ff6a26808ae90b 2026-10-29T06:00:24.769Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-110505-cwe-79-cross-site-scripting-in-enable-svg-webp-and-ico-upload-0743509ca1190aeb 2026-10-29T06:00:24.942Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-110983-cwe-352-cross-site-request-forgery-csrf-in-wp-photo-album-plus-a41df204d5808be2 2026-10-29T06:00:25.116Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-111739-cwe-287-improper-authentication-in-two-factor-authentication-4b922f6bcfc2ddfb 2026-10-29T06:00:25.291Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-113616-cwe-269-improper-privilege-management-in-logixfast-auth-2b29eb7239c72c84 2026-10-29T06:23:32.694Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-113617-cwe-22-path-traversal-in-automated-import-products-to-cart-c2e247eed04d41b3 2026-10-29T06:23:29.757Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-114270-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-geodirectory-f8779a6a6ecdabcb 2026-10-29T06:23:25.973Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-114488-inclusion-of-functionality-from-untrusted-control-sphere-in-red-hat-red-hat-jboss-487d7b0ba4de701e 2026-10-29T06:22:23.153Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115245-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-chat-ai-with-dispatcher-3d81b093a68bde1c 2026-10-29T06:23:23.179Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115259-cwe-639-authorization-bypass-through-user-controlled-key-in-photo-engine-media-a526b8496d7b9779 2026-10-29T06:23:20.317Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115282-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-recipe-card-57eba5abf0ff20a3 2026-10-29T06:23:16.740Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-115299-cwe-352-cross-site-request-forgery-csrf-in-contact-form-by-supsystic-0fd73196521ac687 2026-10-29T06:23:13.269Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115300-cwe-352-cross-site-request-forgery-csrf-in-contact-form-by-supsystic-7b9de47c593d5517 2026-10-29T06:23:10.106Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115301-cwe-94-code-injection-in-contact-form-by-supsystic-4672754449ec1fb8 2026-10-29T06:23:06.966Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-115302-cwe-862-missing-authorization-in-contact-form-by-supsystic-430c0cb38101d4da 2026-10-29T06:23:03.984Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-15564-inclusion-of-functionality-from-untrusted-control-sphere-in-red-hat-red-hat-jboss-3290225412b64128 2026-10-29T06:22:19.529Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-19610-missing-authorization-in-red-hat-red-hat-jboss-enterprise-application-platform-7-df920434dcc4cf08 2026-10-29T06:23:01.323Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-78395-cwe-862-missing-authorization-in-link-library-221fcc846964e5cf 2026-10-29T06:22:57.205Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-78396-cwe-200-exposure-of-sensitive-information-to-an-unauthorized-actor-in-link-library-8998f24df1e23df5 2026-10-29T06:22:54.422Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-85007-cwe-284-improper-access-control-in-video-player-for-youtube-bb8d6772cfb4b60c 2026-10-29T06:22:51.388Z weekly 0.7 https://radar.offseq.com/threat/cve-2026-86794-cwe-79-cross-site-scripting-in-community-events-84238e222532ea48 2026-10-29T06:22:47.884Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-88928-cwe-287-improper-authentication-in-paycomet-for-woocommerce-38fec37620ac9c6f 2026-10-29T06:22:44.442Z weekly 0.8 https://radar.offseq.com/threat/cve-2026-89216-cwe-89-sql-injection-in-vtables-fed8510bfc322a5e 2026-10-29T06:22:41.456Z weekly 0.8