Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1When Gitea's built-in SSH server is enabled ( ), the presented public key was looked up with an SQL comparison of its encoded content, which is case-insensitive on som…Oct 6, 2026
- High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityKEVEPSS 85.6%Aug 28, 2026
- Low3.8Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce client identity binding during the OAuth authorization code redemption flow which allows an a…EPSS 0.2%May 18, 2026
- Critical9.8CrushFTP Authentication Bypass VulnerabilityKEVEPSS 100.0%Apr 3, 2025
- Medium5.3Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.Feb 10, 2025
- High7.2VMware ESXi Authentication Bypass VulnerabilityKEVEPSS 26.8%Jun 25, 2024
- Medium5.5An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option wa…EPSS 1.2%Mar 30, 2023
- Medium5.9An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user per…EPSS 1.6%Mar 30, 2023
- Medium5.9An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers.EPSS 1.6%Mar 30, 2023
9 records · page 1 of 1
PreviousNext