Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermedia…Check if you run itEPSS 0.61%Apr 8, 2026
- High8.7Botan is a C++ cryptography library.Check if you run itEPSS 0.38%Apr 7, 2026
- High8.1Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in…Check if you run itEPSS 0.67%Apr 7, 2026
- High7.5Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when…Check if you run itEPSS 0.33%Apr 7, 2026
- High8.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.43%Apr 7, 2026
- High7.5SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program.Check if you run itEPSS 0.69%Apr 7, 2026
- High8.8Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certi…Check if you run itEPSS 0.34%Apr 7, 2026
- High7.6Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature…Check if you run itEPSS 0.32%Apr 7, 2026
- High8.6curl_cffi is the a Python binding for curl.Check if you run itEPSS 0.45%Apr 6, 2026
- High8.7Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using…Check if you run itEPSS 0.44%Apr 2, 2026
- High8.7Hirschmann EagleSDV firmware prior to 05.4.02 contains a denial-of-service vulnerability in TLS session establishment.Check if you run itEPSS 0.43%Apr 2, 2026
- Critical9.8An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.Check if you run itEPSS 0.73%Apr 2, 2026
- High7.5An issue was discovered in Mbed TLS 3.x before 3.6.6.Check if you run itEPSS 0.50%Apr 2, 2026
- High7.5Suricata is a network IDS, IPS and NSM engine.Check if you run itEPSS 0.47%Apr 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins encrypted input skbs wh…Check if you run itEPSS 0.26%Apr 2, 2026
- Low2.9A vulnerability was determined in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.57%Apr 2, 2026
- Medium5.5A vulnerability has been found in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.76%Apr 2, 2026
- Critical9.1An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.Check if you run itEPSS 0.42%Apr 1, 2026
- Critical9.1An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0.Check if you run itEPSS 0.28%Apr 1, 2026
- Medium5.1In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature.Check if you run itEPSS 0.27%Apr 1, 2026
- High7.5An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0.Check if you run itEPSS 0.49%Apr 1, 2026
- Medium6.7An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0.Check if you run itEPSS 0.15%Apr 1, 2026
- High7.7Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).Check if you run itEPSS 0.18%Apr 1, 2026
- High7.5Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() functionCheck if you run itEPSS 0.53%Apr 1, 2026
- Low2.3A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster.Check if you run itEPSS 0.30%Apr 1, 2026