Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9Traefik is an HTTP reverse proxy and load balancer.EPSS 0.2%Dec 9, 2025
- Medium6.5When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fai…Sep 11, 2024
- High7.5Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client sid…Aug 26, 2024
- Medium6.3libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL.Mar 27, 2024
- Medium5.5Apple Multiple Products Improper Certificate Validation VulnerabilityKEVEPSS 13.4%Sep 21, 2023
- Medium5.3The function X509_VERIFY_PARAM_add0_policy() is documented to implicitly enable the certificate policy check when doing certificate verification.EPSS 1.6%Mar 28, 2023
- Medium5.3Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks.EPSS 1.6%Mar 28, 2023
- High7.8Android Framework Privilege Escalation VulnerabilityKEVEPSS 1.5%Mar 24, 2023
- High7.5A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints.EPSS 3.7%Mar 22, 2023
- High7.5libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously us…EPSS 2.9%Jun 2, 2022
- High8.8Microsoft Active Directory Domain Services Privilege Escalation VulnerabilityKEVEPSS 83.5%May 10, 2022
- Medium5.3The function verifies the signer certificate on an OCSP response.EPSS 1.2%May 3, 2022
- High8.0Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityKEVEPSS 9.2%Feb 10, 2022
- High7.5libcurl-using applications can ask for a specific client certificate to be used in a transfer.EPSS 9.8%Aug 5, 2021
- Medium6.5The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies.EPSS 2.1%Mar 15, 2021
- High7.5curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.EPSS 4.6%Dec 14, 2020
- High8.1Microsoft Windows CryptoAPI Spoofing VulnerabilityKEVEPSS 89.4%Jan 14, 2020
42 records · page 2 of 2
PreviousNext