Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.EPSS 0.2%Sep 22, 2026
- Medium5.9IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by ins…EPSS 0.2%Sep 18, 2026
- Medium4.4Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability.EPSS 0.1%Sep 16, 2026
- Medium5.5Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the ssh.May 22, 2026
- High7.4Netatalk 1.5.0 through 4.2.2 uses a broken cryptographic algorithm in the DHCAST128 UAM, which allows a remote attacker to obtain authentication credentials or imperso…May 21, 2026
- Medium6.3A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2.May 18, 2026
- Critical9.1LibJWT is a C JSON Web Token Library.May 15, 2026
- Critical9.2Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board.May 12, 2026
- High7.3This vulnerability, in the MAXHUB Pivot client application versions prior to v1.36.2, may allow an attacker to obtain encrypted tenant email addresses and related meta…May 7, 2026
- Low3.4In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.May 6, 2026
- Low1.2A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.May 5, 2026
- Low2.9A vulnerability was determined in code-projects Chat System 1.0.Apr 27, 2026
- Medium6.5IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Apr 23, 2026
- High8.2SD-330AC and AMC Manager provided by silex technology, Inc.Apr 20, 2026
- Medium6.3Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.Apr 15, 2026
- Critical9.3: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.Apr 15, 2026
- High7.5Configured cipher preference order not preserved vulnerability in Apache Tomcat.Apr 9, 2026
- High7.0The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware.Apr 7, 2026
- Low2.9A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android.Apr 6, 2026
- Critical9.1fast-jwt provides fast JSON Web Token (JWT) implementation.Apr 6, 2026
- High7.5IBM Aspera Shares 1.9.9 through 1.11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informationApr 1, 2026
- Medium6.5Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.Apr 1, 2026
- Critical9.0Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to…Mar 27, 2026
- High7.5WWBN AVideo is an open source video platform.Mar 23, 2026
- High8.3Authlib is a Python library which builds OAuth and OpenID Connect servers.Mar 16, 2026
47 records · page 1 of 2
PreviousNext