Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMIKEY message MAC is never verified on receive, so forged messages are acceptedOpen the advisoryOct 9, 2026
- UnknownPre-shared key mode transmits the TGK in cleartext, exposing the SRTP master keyOpen the advisoryOct 9, 2026
- UnknownCVE-2026-53010 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.44%Oct 9, 2026
- UnknownCVE-2026-52993 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.40%Oct 9, 2026
- UnknownCVE-2026-52982 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.54%Oct 9, 2026
- UnknownCVE-2026-52958 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.73%Oct 9, 2026
- UnknownCVE-2026-52955 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.38%Oct 9, 2026
- UnknownCVE-2026-52931 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.50%Oct 9, 2026
- UnknownCVE-2026-52914 is listed by USN-8911-1: Linux kernel (OEM) vulnerabilities.Check if you run itEPSS 0.63%Oct 9, 2026
- UnknownSecurity update for unboundOpen the advisoryOct 9, 2026
- UnknownSecurity update for python-PyJWTOpen the advisoryOct 9, 2026
- UnknownCGA-qwf4-5xhv-xq54Open the advisoryOct 9, 2026
- UnknownSecurity update for openssl-3Open the advisoryOct 9, 2026
- UnknownCGA-xjhf-9jv7-7x78Open the advisoryOct 9, 2026
- UnknownCGA-w74x-3c39-v8mcOpen the advisoryOct 9, 2026
- UnknownCGA-xqgj-wr32-m4rhOpen the advisoryOct 9, 2026
- High7.5In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS.Check if you run itEPSS 0.30%Oct 9, 2026
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Check if you run itEPSS 0.22%Oct 9, 2026
- High7.5Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions.Check if you run itEPSS 0.45%Oct 9, 2026
- Medium6.1Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap.Check if you run itEPSS 0.37%Oct 9, 2026
- High8.1Time-of-check Time-of-use (TOCTOU) Race ConditionCheck if you run itEPSS 0.40%Oct 9, 2026
- Critical9.1The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity.Check if you run itEPSS 0.36%Oct 9, 2026
- High7.5By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document.Check if you run itEPSS 0.46%Oct 9, 2026
- Critical9.1In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the…Check if you run itEPSS 0.19%Oct 9, 2026
Sort