Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The fix for CVE-2026-12996 was incomplete.Check if you run itEPSS 0.41%Oct 14, 2026
- Critical9.0Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component.Check if you run itEPSS 0.28%Oct 14, 2026
- High7.1Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent.Check if you run itEPSS 0.26%Oct 14, 2026
- High7.8Important: kernel security, bug fix, and enhancement updateOpen the advisoryOct 14, 2026
- Low3.7Unauthenticated ServerHello can downgrade later connections to classical key exchangeOpen the advisoryOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOpen the advisoryOct 14, 2026
- Medium4.0impls for client session values expose TLS secretsOpen the advisoryOct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- Medium6.8Distribution: Client does not verify returned content against requested digestCheck if you run itEPSS 0.21%Oct 13, 2026
- High7.7Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and sk…Check if you run itEPSS 0.12%Oct 13, 2026
- Medium6.0The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set in nego_process_negotiat…Check if you run itEPSS 0.26%Oct 13, 2026
- High7.1FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang clients by sending incomplete…Check if you run itEPSS 0.27%Oct 13, 2026
- Medium5.9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.37%Oct 13, 2026
- High7.5A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.Check if you run itEPSS 0.41%Oct 13, 2026
- High7.4IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM b…Check if you run itEPSS 0.14%Oct 12, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.18%Oct 12, 2026
- Critical9.1NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adj…Check if you run itEPSS 0.15%Oct 12, 2026
- High7.2Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections.Check if you run itEPSS 0.08%Oct 12, 2026
- High7.4A flaw was found in openstack-network-exporter.Check if you run itEPSS 0.28%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshake…Check if you run itEPSS 0.19%Oct 12, 2026
- Unknownhex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25Check if you run itEPSS 0.24%Oct 12, 2026
- UnknownSecurity update for busyboxOpen the advisoryOct 10, 2026
- UnknownPoly1305 panics or computes a wrong tag on attacker-chosen messages of 64 bytes or moreOpen the advisoryOct 9, 2026
- UnknownSecurity update for openssl-3Open the advisoryOct 9, 2026