Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out…Check if you run itEPSS 0.22%Jun 9, 2026
- Low3.7Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership.Check if you run itEPSS 0.50%Jun 9, 2026
- Medium5.3Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered…Check if you run itEPSS 0.54%Jun 9, 2026
- Low3.7Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages…Check if you run itEPSS 0.80%Jun 9, 2026
- Medium5.9Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application.Check if you run itEPSS 0.56%Jun 9, 2026
- Medium5.9Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption.Check if you run itEPSS 1.06%Jun 9, 2026
- High7.5Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the…Check if you run itEPSS 0.51%Jun 9, 2026
- High7.5Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled.Check if you run itEPSS 1.17%Jun 9, 2026
- High7.8Numeric truncation error in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%Jun 9, 2026
- High7.8Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.34%Jun 9, 2026
- Medium5.0Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the…Check if you run itEPSS 0.30%Jun 9, 2026
- High7.5Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames.Check if you run itEPSS 1.05%Jun 9, 2026
- Critical9.1ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value VulnerabilityCheck if you run itEPSS 1.06%Jun 9, 2026
- High7.4Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integr…Check if you run itEPSS 0.38%Jun 9, 2026
- High7.5Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on…Check if you run itEPSS 1.03%Jun 9, 2026
- Medium6.1CVE-2026-33113 is listed by inventory_critical.Check if you run itEPSS 0.48%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Revert "net/smc: Introduce TCP ULP support" This reverts commit d7cd421da9da2cc7b4d25b8537f66db5c8331c40.Check if you run itEPSS 0.15%Jun 9, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: gro: don't merge zcopy skbs skb_gro_receive() can currently copy frags between the source and…Check if you run itEPSS 0.14%Jun 9, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: tun: free page on build_skb failure in tun_xdp_one() When build_skb() fails in tun_xdp_one(), the f…Check if you run itEPSS 0.13%Jun 9, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: tun: free page on short-frame rejection in tun_xdp_one() tun_xdp_one() returns -EINVAL on a frame s…Check if you run itEPSS 0.13%Jun 9, 2026
- High7.4In the Linux kernel, the following vulnerability has been resolved: tap: free page on error paths in tap_get_user_xdp() tap_get_user_xdp() rejects a frame shorter than…Check if you run itEPSS 0.25%Jun 9, 2026
- High8.8WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database…Check if you run itEPSS 0.26%Jun 9, 2026
- Critical9.1Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex…Check if you run itEPSS 0.54%Jun 9, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 76.11%Jun 9, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.92%Jun 9, 2026
Sort