Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-52955 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.38%Oct 9, 2026
- UnknownCVE-2026-52931 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.50%Oct 9, 2026
- UnknownCVE-2026-52914 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.63%Oct 9, 2026
- High7.5In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS.Check if you run itEPSS 0.30%Oct 9, 2026
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Check if you run itEPSS 0.22%Oct 9, 2026
- High7.5Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.Check if you run itEPSS 0.45%Oct 9, 2026
- Medium6.1Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap.Check if you run itEPSS 0.37%Oct 9, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Check if you run itEPSS 0.40%Oct 9, 2026
- Critical9.1The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document.Check if you run itEPSS 0.46%Oct 9, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.19%Oct 9, 2026
- High7.5In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attac…Check if you run itEPSS 0.56%Oct 9, 2026
- High7.5Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module.Check if you run itEPSS 0.33%Oct 9, 2026
- High7.2Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability.Check if you run itEPSS 0.30%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.2Reusing a Nonce, Key Pair in EncryptionCheck if you run itEPSS 0.25%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.18%Oct 9, 2026
- UnknownCVE-2026-64544 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.18%Oct 9, 2026
- UnknownCVE-2026-64543 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64542 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.17%Oct 9, 2026
- UnknownCVE-2026-64540 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.27%Oct 9, 2026
- UnknownCVE-2026-64539 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64537 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.17%Oct 9, 2026
Sort