Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHost panic when component is cancelled under some conditionsOpen the advisoryOct 14, 2026
- UnknownPanic when invoking an async-lifted function viaOpen the advisoryOct 14, 2026
- UnknownFilesystem sandbox escape when renaming symlinks with trailing slashesOpen the advisoryOct 14, 2026
- Unknown: Request with long url before query parameter crashes hostOpen the advisoryOct 14, 2026
- UnknownGuests can send absolute-form HTTP requests to different hostsOpen the advisoryOct 14, 2026
- Low3.7Unauthenticated ServerHello can downgrade later connections to classical key exchangeOpen the advisoryOct 14, 2026
- Low3.7Brotli certificate decompression can allocate up to 1 GiB before authenticationOpen the advisoryOct 14, 2026
- Low2.3Buffered application data sent to outer server after ECH rejectionOpen the advisoryOct 14, 2026
- Medium4.0impls for client session values expose TLS secretsOpen the advisoryOct 14, 2026
- High7.5CGA-xxhp-6qm3-x2cqOpen the advisoryOct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- HighBy permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer…Check if you run itEPSS 0.31%Oct 14, 2026
- HighWhen writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make write a record that exceeds its line-length parsing limit.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownWhen libcurl uses libssh2 with a hashed file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the callback.Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownA remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownA flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of follow…Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownWhen (or the command line tool's option) is set with one of the documented prefixes ( , , ), that binding is not part of the connection reuse key, so a later transfer…Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownWhen curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer.Check if you run itEPSS 0.26%Oct 14, 2026
- UnknownSecurity update for google-osconfig-agentOpen the advisoryOct 14, 2026
- Medium5.4The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notific…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the o…Check if you run itEPSS 0.15%Oct 14, 2026
- Low3.3A flaw was found in BusyBox dpkg.Check if you run itEPSS 0.17%Oct 14, 2026
- UnknownCVE-2026-88842 affecting package busybox 1.36.1-27Open the advisoryOct 14, 2026
- Medium5.3The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Comme…Check if you run itEPSS 0.14%Oct 14, 2026
- Medium4.4A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query.Check if you run itEPSS 0.13%Oct 14, 2026
Sort