Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config.Check if you run itEPSS 0.79%Mar 19, 2026
- High8.3Heap Overflow in TLS 1.3 ECH parsing.Check if you run itEPSS 0.57%Mar 19, 2026
- High7.5VU#948176: Multiple TLS Libraries can Bypass Delegation EnforcementCheck if you run itEPSS 0.46%Mar 19, 2026
- Low1.2Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protect…Check if you run itEPSS 0.37%Mar 19, 2026
- Medium5.5In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TLS 1.2 server state machine implementation.Check if you run itEPSS 0.21%Mar 19, 2026
- Low2.1Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than t…Check if you run itEPSS 0.26%Mar 19, 2026
- High8.1Improper certificate validation in Devolutions Hub Reporting Service 2025.3.1.1 and earlier allows a network attacker to perform a man-in-the-middle attack via disable…Check if you run itEPSS 0.29%Mar 18, 2026
- High8.7Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption.Check if you run itEPSS 0.19%Mar 17, 2026
- Medium5.5A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05.Check if you run itEPSS 1.90%Mar 16, 2026
- High8.1cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.26%Mar 16, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Check if you run itEPSS 0.51%Mar 13, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.Check if you run itEPSS 0.13%Mar 11, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.Check if you run itEPSS 0.12%Mar 11, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit.Check if you run itEPSS 0.51%Mar 10, 2026
- High8.3Taipower APP for Andorid developed by Taipower has an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.21%Mar 9, 2026
- Medium5.5Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.51%Mar 7, 2026
- High8.8Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.36%Mar 7, 2026
- Low2.1Sliver is a command and control framework that uses a custom Wireguard netstack.Check if you run itEPSS 0.54%Mar 7, 2026
- Medium5.9Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints.Check if you run itEPSS 0.33%Mar 6, 2026
- High7.5Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.73%Mar 5, 2026
- Critical9.8Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, a…Check if you run itEPSS 0.36%Mar 5, 2026
- Medium6.8A vulnerability in the Do Not Decrypt exclusion feature of the SSL decryption feature of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthentic…Check if you run itEPSS 0.39%Mar 4, 2026
- Medium5.8A vulnerability in the TLS cryptography functionality of the Snort 3 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthentic…Check if you run itEPSS 0.39%Mar 4, 2026
- Critical9.8Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configu…Check if you run itEPSS 0.60%Feb 25, 2026
- Critical9.8Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user.Check if you run itEPSS 0.60%Feb 25, 2026