Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection.Check if you run itEPSS 0.60%Feb 25, 2026
- High8.3The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS.Check if you run itEPSS 0.27%Feb 25, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.24%Feb 25, 2026
- High8.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.88%Feb 24, 2026
- Medium6.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.24%Feb 24, 2026
- High7.7Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.55%Feb 24, 2026
- High7.7Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.55%Feb 24, 2026
- High8.8Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium6.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.42%Feb 24, 2026
- High7.4An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0.Check if you run itEPSS 0.18%Feb 23, 2026
- High7.4An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master.Check if you run itEPSS 0.18%Feb 23, 2026
- Critical9.1An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master.Check if you run itEPSS 0.19%Feb 23, 2026
- Low2.9A vulnerability was detected in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.28%Feb 23, 2026
- High8.1Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Check if you run itEPSS 0.42%Feb 21, 2026
- High7.5The embedded web interface of the device does not support HTTPS/TLS for authentication and uses HTTP Basic Authentication.Check if you run itEPSS 0.25%Feb 20, 2026
- Low2.3uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake.Check if you run itEPSS 0.19%Feb 20, 2026
- Medium6.5uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting resistance while still using it for the handshake.Check if you run itEPSS 0.39%Feb 20, 2026
- Medium5.3A flaw was found in GnuTLS.Check if you run itEPSS 0.67%Feb 9, 2026
- Medium4.0A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization.Check if you run itEPSS 0.23%Jan 26, 2026
- Medium5.3When doing TLS related transfers with reused easy or multi handles and altering the option, libcurl could accidentally reuse a CA store cached in memory for which the partial chainCheck if you run itEPSS 0.76%Jan 8, 2026
- Medium5.9When using option with libcurl or with the curl tool, curl should check the public key of the server certificate to verify the peer.Open the advisoryJan 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: tls: avoid hanging tasks on the tx_lock syzbot sent a hung task report and Eric explains that…Check if you run itEPSS 0.60%Dec 30, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue [1] that crashes…Check if you run itEPSS 0.20%Dec 16, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfs_match_client() If the TLS security policy is of type R…Check if you run itEPSS 0.08%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The "req.start" and "req.len" variables are u64…Check if you run itEPSS 0.19%Dec 16, 2025