Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.7IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptog…CVE-2026-101294 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 13, 2026
High7.6Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby.CVE-2026-42246 · ruby-lang · net · CVE.org · NIST NVDMay 9, 2026
High8.2OpenClaw before 2026.3.28 contains a webhook replay vulnerability in Plivo V3 signature verification that canonicalizes query ordering for signatures but hashes raw UR…CVE-2026-41395 · openclaw · openclaw · CVE.org · NIST NVDApr 28, 2026
High7.3Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual au…CVE-2026-40542 · apache · httpclient · CVE.org · NIST NVD · ApacheApr 22, 2026
Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.CVE-2026-29142 · seppmail · secure email gateway · CVE.org · NIST NVDApr 2, 2026
High8.8Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation.CVE-2026-4601 · kjur · jsrsasign · CVE.org · NIST NVDMar 23, 2026
High7.7Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basic…CVE-2026-4258 · bitwiseshiftleft · stanford javascript crypto library · CVE.org · NIST NVDMar 17, 2026
High8.2Authlib is a Python library which builds OAuth and OpenID Connect servers.CVE-2026-28498 · authlib · authlib · CVE.org · NIST NVD · PythonMar 16, 2026
High7.2Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.CVE-2025-47383 · qualcomm · 5g fixed wireless access platform firmware · CVE.org · NIST NVDMar 2, 2026
Medium4.3Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL.CVE-2022-30115 · haxx · curl · CVE.org · FIRST EPSS · NIST NVD · SplunkEPSS 1.4%Jun 2, 2022
High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…CVE-2021-22946 · haxx · curl · CVE.org · FIRST EPSS · NIST NVDEPSS 4.5%Sep 29, 2021
High7.5Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and t…CVE-2021-33560 · gnupg · libgcrypt · CVE.org · FIRST EPSS · NIST NVDEPSS 2.4%Jun 8, 2021