Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.6NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain windo…Check if you run itEPSS 0.14%May 20, 2026
- Low1.8An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue C…Check if you run itEPSS 0.09%May 19, 2026
- High7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCheck if you run itEPSS 1.13%May 18, 2026
- High8.7Elixir WebRTC is an Elixir implementation of the W3C WebRTC API.Check if you run itEPSS 0.40%May 14, 2026
- High8.2Fleet is open source device management software.Check if you run itEPSS 0.21%May 14, 2026
- Medium5.8MISP modules are autonomous modules that can be used to extend MISP for new services.Check if you run itEPSS 0.13%May 13, 2026
- Medium5.3aria2c accepts a server certificate with incorrect Extended Key Usage (EKU).Check if you run itEPSS 0.19%May 13, 2026
- Medium5.3When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is valid, it fails t…Check if you run itEPSS 0.32%May 13, 2026
- Medium5.9A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool.Check if you run itEPSS 0.36%May 13, 2026
- Medium6.8Lemur manages TLS certificate creation.Check if you run itEPSS 0.14%May 12, 2026
- High8.1Lemur manages TLS certificate creation.Check if you run itEPSS 0.29%May 12, 2026
- High7.5Deskflow is a keyboard and mouse sharing app.Check if you run itEPSS 0.49%May 12, 2026
- Critical9.8Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path.Check if you run itEPSS 0.94%May 12, 2026
- Low3.7ciguard is a static security auditor for CI/CD pipelines.Check if you run itEPSS 0.31%May 12, 2026
- Medium5.3Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.Check if you run itEPSS 0.23%May 12, 2026
- Medium6.0OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trus…Check if you run itEPSS 0.39%May 11, 2026
- Medium6.8pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.19%May 11, 2026
- Medium5.3Zephyr sockets created with can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not…Check if you run itEPSS 0.24%May 11, 2026
- High7.6Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.Check if you run itEPSS 0.31%May 9, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for ns iteration ioctls Even privileged services should not necessa…Check if you run itEPSS 0.18%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't reserve…Check if you run itEPSS 0.16%May 8, 2026
- High8.2PJSIP is a free and open source multimedia communication library written in C.Check if you run itEPSS 0.27%May 7, 2026
- High7.4A flaw was found in gnutls.Check if you run itEPSS 0.47%May 7, 2026
- Critical9.8Gnutls: gnutls: authentication bypass via nul character in usernameCheck if you run itEPSS 0.94%May 7, 2026
- Medium5.9OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP.Check if you run itEPSS 0.43%May 6, 2026