Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections.EPSS 0.1%Oct 12, 2026
- Medium6.3FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname che…EPSS 0.1%Oct 8, 2026
- High8.1A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to inf…Sep 8, 2026
- High8.7Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.O…EPSS 0.2%Aug 22, 2026
- Medium5.3When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in t…EPSS 0.5%Jan 8, 2026
- Medium6.5libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS.Mar 27, 2024
6 records · page 1 of 1
PreviousNext