Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-97032 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package golang 1.27.1-1Open the advisoryOct 8, 2026
- UnknownCVE-2026-78663 affecting package golang 1.26.7-1Open the advisoryOct 8, 2026
- High7.5HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently.Check if you run itEPSS 0.42%Oct 8, 2026
- UnknownReject malformed ECH outer extension references in crypto/tlsCheck if you run itEPSS 0.39%Oct 8, 2026
- UnknownExcessive CPU consumption from repeated initial window changes in net/httpCheck if you run itEPSS 0.57%Oct 8, 2026
- UnknownDouble flow control refund on HTTP/2 server streams in net/httpCheck if you run itEPSS 0.57%Oct 8, 2026
- HighHTTP/2 transport accepts malformed framing-related headers in net/httpCheck if you run itEPSS 0.30%Oct 8, 2026
- UnknownHTTP/2 server memory exhaustion due to Trailer headers in net/httpCheck if you run itEPSS 0.57%Oct 8, 2026
- HighHTTP/1 client connection desynchronization after CONNECT rejection in net/httpCheck if you run itEPSS 0.31%Oct 8, 2026
- Medium5.1jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalid…Check if you run itEPSS 0.21%Oct 8, 2026
- CriticalHazelcast allows arbitrary member memory access by low-privileged clientCheck if you run itEPSS 0.38%Oct 8, 2026
- HighHazelcast has an authorization bypass in IMap Predicates APICheck if you run itEPSS 0.39%Oct 8, 2026
- Medium5.9MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSCheck if you run itEPSS 0.24%Oct 8, 2026
- Medium6.8AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)Check if you run itEPSS 0.30%Oct 8, 2026
- Medium6.8AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSCheck if you run itEPSS 0.36%Oct 8, 2026
- High7.5AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabledCheck if you run itEPSS 0.43%Oct 8, 2026
- High7.4AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsCheck if you run itEPSS 0.19%Oct 8, 2026
- Low3.7AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random sourceCheck if you run itEPSS 0.26%Oct 8, 2026
- UnknownAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukCheck if you run itEPSS 0.26%Oct 8, 2026
- CriticalAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostCheck if you run itEPSS 0.19%Oct 8, 2026
- High7.1In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI and the O…Check if you run itEPSS 0.20%Oct 8, 2026
- High7.6An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.10%Oct 8, 2026
- High7.3A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d a…Check if you run itEPSS 0.10%Oct 8, 2026