Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

High8.7IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptog…CVE-2026-101294 · CVE.org · NIST NVDOct 13, 2026
Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.CVE-2022-30115 · haxx · curl · CVE.org · NIST NVDJun 2, 2022
High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…CVE-2021-22946 · haxx · curl · CVE.org · NIST NVD · debian, linuxSep 29, 2021
High7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and t…CVE-2021-33560 · gnupg · libgcrypt · CVE.org · NIST NVD · debian, linuxJun 8, 2021