Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document.Check if you run itEPSS 0.46%Oct 9, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.19%Oct 9, 2026
- High7.5In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attac…Check if you run itEPSS 0.56%Oct 9, 2026
- High7.5Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module.Check if you run itEPSS 0.33%Oct 9, 2026
- High7.2Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability.Check if you run itEPSS 0.30%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.2Reusing a Nonce, Key Pair in EncryptionCheck if you run itEPSS 0.25%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.18%Oct 9, 2026
- UnknownCVE-2026-64544 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.18%Oct 9, 2026
- UnknownCVE-2026-64543 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64542 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.17%Oct 9, 2026
- UnknownCVE-2026-64540 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.27%Oct 9, 2026
- UnknownCVE-2026-64539 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64537 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.17%Oct 9, 2026
- UnknownCVE-2026-64533 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.14%Oct 9, 2026
- UnknownCVE-2026-64532 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64349 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.12%Oct 9, 2026
- UnknownCVE-2023-54125 is listed by USN-8875-2: Linux kernel (NVIDIA) vulnerabilities.Check if you run itEPSS 0.16%Oct 9, 2026
- UnknownCVE-2022-3114 is listed by USN-8875-2: Linux kernel (NVIDIA) vulnerabilities.Check if you run itEPSS 0.22%Oct 9, 2026
- UnknownCVE-2025-68768 is listed by USN-8903-2: Linux kernel vulnerabilities.Check if you run itEPSS 0.20%Oct 9, 2026
- High8.2Uncontrolled RecursionCheck if you run itEPSS 0.50%Oct 9, 2026
- HighIn the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program can invalidate its cached SRH withCheck if you run itEPSS 0.16%Oct 9, 2026
- High7.8bpf: Reject dev-bound-only programs on other devicesCheck if you run itEPSS 0.16%Oct 9, 2026
- High7.8veth: manage XDP program pointers during channel resizeCheck if you run itEPSS 0.13%Oct 9, 2026
Sort