Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisoryOct 2, 2026
- High7.1Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.38%Oct 2, 2026
- High8.2Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.21%Oct 2, 2026
- High8.2Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.21%Oct 2, 2026
- High7.1Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.22%Oct 2, 2026
- High8.7Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPacket, UserAttributeSubpacket…Check if you run itEPSS 0.43%Oct 2, 2026
- High8.2Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.30%Oct 2, 2026
- High7.1Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.38%Oct 2, 2026
- High8.7Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also used by PkixAttrCertPathBuilder) in Legio…Check if you run itEPSS 0.14%Oct 2, 2026
- High7.1Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.23%Oct 2, 2026
- High8.7In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with the top b…Check if you run itEPSS 0.42%Oct 2, 2026
- High8.7Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.32%Oct 2, 2026
- High8.7Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.52%Oct 2, 2026
- High8.2Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.23%Oct 2, 2026
- High8.2Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.29%Oct 2, 2026
- High8.7Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.36%Oct 2, 2026
- Critical9.1Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.33%Oct 2, 2026
- Medium6.5StellarWP the_events_calendar Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.22%Oct 2, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.49%Oct 2, 2026
- UnknownGitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1Check this weekEPSS 17.49%Oct 2, 2026
- Unknowngeminilabs site_reviews Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 2, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.04%Oct 2, 2026
- UnknownMelapress wp_activity_log Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Oct 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.59%Oct 2, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.36%Oct 2, 2026
Sort