Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in rtx queue tcp_write_collapse_fence() sets TCP_SKB_C…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized ag…Open the advisoryOct 18, 2026
- High8.3OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when…Open the advisoryOct 18, 2026
- High7.4crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumptionCheck if you run itEPSS 0.92%Oct 16, 2026
- UnknownSecurity update for python-urllib3Open the advisoryOct 16, 2026
- Medium6.8The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints.Check if you run itEPSS 9.00%Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserCheck if you run itEPSS 0.33%Oct 16, 2026
- High7.4undici is an HTTP client library for Node.js.Check if you run itEPSS 0.18%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.18%Oct 15, 2026
- Unknownrabbitmq-server vulnerabilitiesOpen the advisoryOct 15, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.24%Oct 15, 2026
- High8.0Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksCheck if you run itEPSS 0.33%Oct 15, 2026
- Critical9.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handli…Check if you run itEPSS 0.42%Oct 15, 2026
- Medium6.5TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.Check if you run itEPSS 0.41%Oct 15, 2026
- UnknownSecurity update for the Java stackOpen the advisoryOct 15, 2026
- High8.7FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to injec…Check if you run itEPSS 0.26%Oct 14, 2026
- High7.5Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perf…Check if you run itEPSS 0.23%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.23%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.38%Oct 14, 2026
- High8.7The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns.Check if you run itEPSS 0.32%Oct 14, 2026
- High8.7computes the certificate signature's length as without first checking that is non-zero.Check if you run itEPSS 0.18%Oct 14, 2026
- Critical9.3When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet.Check if you run itEPSS 0.28%Oct 14, 2026
- High8.2Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicio…Check if you run itEPSS 0.47%Oct 14, 2026
- Medium6.3Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenti…Check if you run itEPSS 0.36%Oct 14, 2026
- High8.2An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated atta…Check if you run itEPSS 0.34%Oct 14, 2026
393 records · page 1 of 16
PreviousNext