Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments.Check if you run itEPSS 0.38%May 6, 2026
- Low2.3Incus is a system container and virtual machine manager.Check if you run itEPSS 0.22%May 6, 2026
- Medium6.9A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g.Check if you run itEPSS 0.31%May 6, 2026
- High7.5Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes.Check if you run itEPSS 0.34%May 4, 2026
- High8.8In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code.Check if you run itEPSS 0.54%May 4, 2026
- High7.5Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyCheck if you run itEPSS 1.12%May 4, 2026
- Medium6.3Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections.Check if you run itEPSS 0.52%May 1, 2026
- High7.4A flaw was found in gnutls.Check if you run itEPSS 0.89%Apr 30, 2026
- Low3.7A flaw was found in gnutls.Check if you run itEPSS 0.93%Apr 30, 2026
- Critical9.1Gnutls: gnutls: denial of service via dtls zero-length fragmentCheck if you run itEPSS 0.89%Apr 30, 2026
- Medium5.9Apache Airflow's SMTP provider called Python's without an SSL context, so no certificate validation was performed on the TLS upgrade.Check if you run itEPSS 0.27%Apr 30, 2026
- Medium5.5TLS protocol dissector infinite loop in Wireshark 4.6.0 to 4.6.4 allows denial of serviceCheck if you run itEPSS 0.16%Apr 30, 2026
- High8.8TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code executionCheck if you run itEPSS 0.65%Apr 30, 2026
- Medium4.8wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU).Check if you run itEPSS 0.15%Apr 29, 2026
- Medium4.8Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between…Check if you run itEPSS 0.18%Apr 28, 2026
- High7.1OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and T…Check if you run itEPSS 0.54%Apr 28, 2026
- Medium6.5Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS t…Check if you run itEPSS 0.45%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.28%Apr 27, 2026
- Critical10.0Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Apache Camel Camel-Coap component.Check if you run itEPSS 7.16%Apr 27, 2026
- Low2.9A security vulnerability has been detected in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.25%Apr 25, 2026
- Medium5.9MailKit is a cross-platform mail client library built on top of MimeKit.Check if you run itEPSS 0.33%Apr 24, 2026
- Critical9.3LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over u…Check if you run itEPSS 0.95%Apr 23, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do…Check if you run itEPSS 0.73%Apr 23, 2026
- Medium6.5A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries tha…Check if you run itEPSS 0.39%Apr 22, 2026
- Medium6.9Oxia is a metadata store and coordination system.Check if you run itEPSS 0.26%Apr 21, 2026