Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame.Check if you run itEPSS 0.74%Oct 22, 2026
- High7.5HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request.Check if you run itEPSS 0.81%Oct 22, 2026
- Critical9.1HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgi_conn structure's drl field that allows buffer misparse as new FCGI record heaCheck if you run itEPSS 0.33%Jun 18, 2026
- High8.8The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy.Check if you run itEPSS 0.19%Jun 2, 2026
- High7.4Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.66%Apr 24, 2026
- High8.9Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.35%Apr 24, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.43%Apr 24, 2026
- High8.9Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.82%Apr 24, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.42%Apr 20, 2026
- Medium5.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.39%Apr 20, 2026
- Medium5.8An issue was discovered in HAProxy before 3.3.6.Check if you run itEPSS 0.31%Apr 13, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 2.07%Mar 18, 2026
- High7.5Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 2.30%Jan 15, 2026
- High7.5Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests.Check if you run itEPSS 0.74%Nov 19, 2025
- Medium6.4HAProxy Kubernetes Ingress Controller before 3.1.13, when the config-snippets feature flag is used, accepts config snippets from users with create/update permissions.Check if you run itEPSS 0.27%Oct 8, 2025
- UnknownHAProxy Endless Loop HTTP/2 VulnerabilityPatch nowKEVEPSS 1.20%Sep 3, 2024
- High7.5HTTP/2 Rapid Reset Attack VulnerabilityPatch nowKEVEPSS 100.00%Oct 10, 2023
Sort
17 records