Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.20%Oct 9, 2026
- UnknownReject malformed ECH outer extension references in crypto/tlsCheck if you run itEPSS 0.39%Oct 8, 2026
- High7.5MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parametersCheck if you run itEPSS 0.39%Oct 8, 2026
- Medium5.9MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLSCheck if you run itEPSS 0.24%Oct 8, 2026
- Medium6.8AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSCheck if you run itEPSS 0.36%Oct 8, 2026
- CriticalAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostCheck if you run itEPSS 0.19%Oct 8, 2026
- Medium6.3FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname che…Check if you run itEPSS 0.14%Oct 8, 2026
- High7.6An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.Check if you run itEPSS 0.10%Oct 8, 2026
- Medium5.0PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCheck if you run itEPSS 0.13%Oct 5, 2026
- HighRabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UICheck if you run itEPSS 0.16%Oct 1, 2026
- UnknownImportant: nodejs:24 security, bug fix, and enhancement updateOpen the advisorySep 30, 2026
- Critical9.1RabbitMQ: Trust-store whitelist by Issuer+Serial onlyCheck if you run itEPSS 0.25%Sep 23, 2026
- High7.3RabbitMQ: Stored XSS via TLS peer-certificate DN in management UICheck if you run itEPSS 0.30%Sep 23, 2026
- UnknownCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service VulnerabilityCheck if you run itEPSS 0.55%Sep 18, 2026
- UnknownCisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service VulnerabilityCheck if you run itEPSS 0.19%Sep 16, 2026
- Medium6.7ZDI-26-701: Linux Kernel TLS Protocol Out-Of-Bounds Read Information Disclosure VulnerabilityCheck if you run itEPSS 0.51%Sep 14, 2026
- UnknownCVE-2026-78134 affecting package strongswan for versions less than 5.9.14-11Open the advisorySep 11, 2026
- Medium6.5A flaw was found in JSS (Java Security Services).Check if you run itEPSS 0.18%Aug 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: Input: evdev - sanitize event type index when fetching event masks The user-supplied event type ind…Check if you run itEPSS 0.19%Aug 22, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !p…Check if you run itEPSS 0.18%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: bound the hwdep mmap fault offset snd_us428ctls_vm_fault() turns the faulting page off…Check if you run itEPSS 0.13%Aug 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 optimistic retry tls_decrypt_sg() advances msg->msg_iter w…Check if you run itEPSS 0.65%Aug 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: tls: don't leave a full plaintext sk_msg ring unpushed When the copy path in tls_sw_sendmsg_locked(…Check if you run itEPSS 0.13%Aug 22, 2026
- High8.7Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.O…Check if you run itEPSS 0.15%Aug 22, 2026
- High8.8CVE-2026-74580 (V-GHOST) – Affected Proxmox VE VersionsCheck if you run itEPSS 0.13%Aug 21, 2026