Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections.EPSS 0.1%Oct 12, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…EPSS 0.2%Oct 9, 2026
- Medium6.3FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname che…EPSS 0.1%Oct 8, 2026
- High8.1A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to inf…EPSS 0.3%Sep 8, 2026
- High8.7Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.O…EPSS 0.2%Aug 22, 2026
- High7.4The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side.May 13, 2026
- High7.3Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.May 5, 2026
- High8.1Vulnerability in Spring Spring Security.EPSS 0.3%Apr 22, 2026
- Medium6.3The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.…Apr 10, 2026
- Medium5.3Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0.EPSS 0.3%Mar 3, 2026
- Medium5.3When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in t…EPSS 0.5%Jan 8, 2026
- Medium6.5libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS.EPSS 1.5%Mar 27, 2024
12 records · page 1 of 1
PreviousNext