Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: fix refcount bug in sk_psock_get (2) Syzkaller reports refcount bug as follows: ------------[ cut here ]---Check if you run itEPSS 0.26%Jun 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when alloc_page failed We cannot set frag_list to NULL pointer when alloc_page failed.Check this weekEPSS 47.00%Jun 18, 2025
- High8.3Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.25%Jun 6, 2025
- Medium6.5Issue summary: Use of -addreject option with the openssl x509 application adds a trusted use instead of a rejected use for a certificate.Check this weekEPSS 36.00%May 22, 2025
- Medium6.5The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with tCheck if you run itEPSS 0.22%May 21, 2025
- Medium5.9Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate anyCheck this weekEPSS 30.00%May 16, 2025
- Medium5.9Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks.Check if you run itEPSS 0.23%May 14, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix PM related deadlocks in MS IOCTLs Prevent runtime resume/suspend while MS IOCTLs are in progressCheck if you run itEPSS 0.21%May 9, 2025
- Medium6.9Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.Check if you run itEPSS 8.96%May 7, 2025
- High7.8Memory corruption while acquire and update IOCTLs during IFE output resource ID validation.Check this weekEPSS 12.00%May 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do _all_ initialization before exposing /dev/kvm to userspace Call kvm_init() only after _all_ setup iCheck this weekEPSS 21.00%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconnect a TLS socket and then run intoCheck if you run itEPSS 0.30%May 1, 2025
- Critical9.1An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and coCheck if you run itEPSS 0.36%Apr 28, 2025
- UnknownCisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Uncontrolled Resource ConsumptionPatch nowKEVEPSS 1.87%Apr 23, 2025
- Medium6.4SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name ofCheck if you run itEPSS 0.10%Apr 19, 2025
- Low2.6HCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities.Check this weekEPSS 17.00%Apr 17, 2025
- Medium5.4gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services.Check this weekEPSS 37.00%Apr 15, 2025
- Unknowningress-nginx controller configuration injection via unsanitized auth-tls-match-cn annotationCheck this weekEPSS 33.24%Mar 23, 2025
- Critical9.8net/tls: fix slab-out-of-bounds bug in decrypt_internalCheck if you run itEPSS 0.67%Feb 26, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_pag…Check if you run itEPSS 0.55%Dec 4, 2024
- Medium6.5When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fai…Check if you run itEPSS 0.82%Sep 11, 2024
- Critical9.1Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer.Check if you run itEPSS 5.58%Jun 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tls: fix missing memory barrier in tls_init In tls_init(), a write memory barrier is missing, and s…Check if you run itEPSS 0.26%Jun 21, 2024
- UnknownOpenSSL OpenSSL Inadequate Encryption StrengthPatch nowKEVEPSS 95.33%May 6, 2024
- Medium5.9Issue summary: Checking excessively long invalid RSA public keys may take a long time.Check if you run itEPSS 2.30%Apr 25, 2024