Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key.Check if you run itEPSS 1.20%May 3, 2022
- High7.5The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.Check this weekEPSS 73.19%Mar 15, 2022
- Medium5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back m…Check if you run itEPSS 3.01%Sep 29, 2021
- High7.5A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server ( on the command line or set to or wit…Check if you run itEPSS 4.54%Sep 29, 2021
- High7.5libcurl-using applications can ask for a specific client certificate to be used in a transfer.Check this weekEPSS 15.14%Aug 5, 2021
- High8.1curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection.Check this weekEPSS 63.53%Jun 11, 2021
- Medium5.3curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use…Check if you run itEPSS 4.26%Jun 11, 2021
- Low3.7curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.Check if you run itEPSS 3.06%Apr 1, 2021
- Critical9.8A flaw was found in gnutls.Check if you run itEPSS 3.48%Mar 12, 2021
- Critical9.8A flaw was found in gnutls.Check if you run itEPSS 3.80%Mar 12, 2021
- High8.8Veritas Backup Exec Agent Command Execution VulnerabilityPatch nowKEVEPSS 23.95%Mar 1, 2021
- High8.1Veritas Backup Exec Agent File Access VulnerabilityPatch nowKEVEPSS 13.52%Mar 1, 2021
- UnknownTgsoft Vir.it_explorer arbitrary write kernel vulnerabilityPatch nowKEVJan 28, 2021
- High7.5An issue was discovered in GnuTLS before 3.6.15.Check if you run itEPSS 3.83%Sep 4, 2020
- High7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).Check this weekEPSS 22.28%Jun 4, 2020
- High7.4GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS.Check if you run itEPSS 3.39%Apr 3, 2020
- Unknownslysoft anydvd Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 0.73%Mar 6, 2018
- UnknownAlfredo Milani Comparetti SpeedFan 4.33 Speedfan.sys Privilege EscalationPatch nowKEVEPSS 0.94%Mar 6, 2018
- High7.5The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion bloc…Check this weekEPSS 94.70%Sep 1, 2016
- UnknownSchannel Security Feature Bypass VulnerabilityPatch nowKEVEPSS 13.15%Apr 26, 2016
- Medium5.9Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key ExcCheck if you run itEPSS 2.90%Jan 9, 2016
- Medium4.3The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgPatch nowKEVEPSS 98.69%Jan 9, 2015
- High7.5OpenSSL Information Disclosure VulnerabilityPatch nowKEVEPSS 100.00%Apr 7, 2014
- UnknownApache HTTP Server Improper Certificate ValidationPatch nowKEVEPSS 87.26%Nov 18, 2009
- High8.8Oracle VirtualBox Insufficient Input Validation VulnerabilityPatch nowKEVEPSS 6.88%Aug 5, 2008
400 records · page 16 of 16
PreviousNext