Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0.Check if you run itEPSS 0.60%Apr 1, 2026
- Medium6.5Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.Check if you run itEPSS 0.22%Apr 1, 2026
- Critical10.0A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform pr…Check if you run itEPSS 0.41%Apr 1, 2026
- High7.2CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.42%Mar 30, 2026
- Medium5.3The PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwar…Check if you run itEPSS 0.52%Mar 27, 2026
- Critical9.1Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.Check if you run itEPSS 0.50%Mar 27, 2026
- Medium6.3Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation.Check if you run itEPSS 0.22%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability th…Check if you run itEPSS 0.50%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability th…Check if you run itEPSS 0.54%Mar 27, 2026
- Medium6.3Cocos AI is a confidential computing system for AI.Check if you run itEPSS 0.07%Mar 27, 2026
- Medium6.5GoDoxy is a reverse proxy and container orchestrator for self-hosters.Check if you run itEPSS 0.53%Mar 26, 2026
- High8.2A flaw was found in libsoup's SoupServer.Check if you run itEPSS 0.45%Mar 26, 2026
- High8.8etcd is a distributed key-value store for the data of a distributed system.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium6.5etcd is a distributed key-value store for the data of a distributed system.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium4.2NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.17%Mar 25, 2026
- High7.4A vulnerability in the TLS library of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust the available memory of an affected device.Check if you run itEPSS 0.18%Mar 25, 2026
- High8.6Froxlor is open source server administration software.Check if you run itEPSS 0.68%Mar 24, 2026
- Medium5.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the…Check if you run itEPSS 0.15%Mar 24, 2026
- Medium5.9Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.24%Mar 24, 2026
- High7.5Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS.Check if you run itEPSS 0.31%Mar 24, 2026
- High8.7strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a…Check if you run itEPSS 1.01%Mar 23, 2026
- High8.1Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate v…Check if you run itEPSS 0.24%Mar 20, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.49%Mar 20, 2026
- Medium5.7Sliver is a command and control framework that uses a custom Wireguard netstack.Check if you run itEPSS 0.46%Mar 20, 2026
- Low1.3Heap-based buffer overflow in the KCAPI ECC code path of wc_ecc_import_x963_ex() in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past t…Check if you run itEPSS 0.62%Mar 19, 2026