Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.Check if you run itEPSS 0.45%Oct 9, 2026
- Medium6.1Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap.Check if you run itEPSS 0.37%Oct 9, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Check if you run itEPSS 0.40%Oct 9, 2026
- Critical9.1The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document.Check if you run itEPSS 0.46%Oct 9, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.19%Oct 9, 2026
- High7.5In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attac…Check if you run itEPSS 0.56%Oct 9, 2026
- High7.5Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module.Check if you run itEPSS 0.33%Oct 9, 2026
- High7.2Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability.Check if you run itEPSS 0.30%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.Check if you run itEPSS 0.19%Oct 9, 2026
- High8.2Reusing a Nonce, Key Pair in EncryptionCheck if you run itEPSS 0.25%Oct 9, 2026
- High8.8Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.Check if you run itEPSS 0.18%Oct 9, 2026
- UnknownCVE-2026-64544 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.18%Oct 9, 2026
- UnknownCVE-2026-64543 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64542 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.17%Oct 9, 2026
- UnknownCVE-2026-64540 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.27%Oct 9, 2026
- UnknownCVE-2026-64539 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64537 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.17%Oct 9, 2026
- UnknownCVE-2026-64533 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.14%Oct 9, 2026
- UnknownCVE-2026-64532 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.13%Oct 9, 2026
- UnknownCVE-2026-64349 is listed by USN-8887-3: Linux kernel vulnerabilities.Check if you run itEPSS 0.12%Oct 9, 2026
- UnknownCVE-2023-54125 is listed by USN-8875-2: Linux kernel (NVIDIA) vulnerabilities.Check if you run itEPSS 0.16%Oct 9, 2026
- UnknownCVE-2022-3114 is listed by USN-8875-2: Linux kernel (NVIDIA) vulnerabilities.Check if you run itEPSS 0.22%Oct 9, 2026
Sort