Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.Check if you run itEPSS 0.26%Apr 21, 2026
- Medium4.8pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.16%Apr 21, 2026
- Low2.0OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.14%Apr 21, 2026
- Low2.0OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls.Check if you run itEPSS 0.18%Apr 21, 2026
- Critical9.3xrdp is an open source RDP server.Check if you run itEPSS 0.23%Apr 17, 2026
- High8.6Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges.Check if you run itEPSS 0.39%Apr 17, 2026
- High8.1sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c.Check if you run itEPSS 1.01%Apr 16, 2026
- Medium5.0ONLYOFFICE DocumentServer before 9.3.0 has an untrusted pointer dereference in XLS processing/conversion (via pictFmla.cbBufInCtlStm and other vectors), leading to an…Check if you run itEPSS 0.32%Apr 16, 2026
- Critical9.8A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port.Check if you run itEPSS 0.92%Apr 14, 2026
- Medium6.9Apache Log4j Core's Rfc5424Layout https://logging.apache.org/log4j/2.x/manual/layouts.html#RFC5424Layout , in versions 2.21.0 through 2.25.3, is vulnerable to log inje…Check if you run itEPSS 1.19%Apr 10, 2026
- Medium6.3The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.…Check if you run itEPSS 0.50%Apr 10, 2026
- High7.5Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.Check if you run itEPSS 1.06%Apr 10, 2026
- High8.6wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untru…Check if you run itEPSS 0.22%Apr 10, 2026
- Medium6.3A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing.Check if you run itEPSS 0.34%Apr 10, 2026
- Low2.3X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore.Check if you run itEPSS 0.13%Apr 10, 2026
- Medium6.9In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL.Check if you run itEPSS 0.45%Apr 9, 2026
- Low2.1Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the…Check if you run itEPSS 0.37%Apr 9, 2026
- High8.3Heap buffer overflow in DTLS 1.3 ACK message processing.Check if you run itEPSS 0.59%Apr 9, 2026
- Medium6.0In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium5.4dde-control-center is the control panel of DDE, the Deepin Desktop Environment.Check if you run itEPSS 0.20%Apr 9, 2026
- High7.5A flaw was found in gnutls.Check if you run itEPSS 1.32%Apr 9, 2026
- Critical9.1In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests t…Check if you run itEPSS 0.42%Apr 9, 2026
- High7.5Kamailio is an open source implementation of a SIP Signaling Server.Check if you run itEPSS 0.55%Apr 8, 2026
- High7.2An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution…Check if you run itEPSS 0.72%Apr 8, 2026
- High7.5If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.Check if you run itEPSS 0.62%Apr 8, 2026