Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

CVE-2024-22588

Kwik commit 745fd4e2 does not discard unused encryption keys.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ptrd
Products
Kwik
CVE-2025-23020

An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs).

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ptrd
Products
Kwik
CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Ptrd
Products
Kwik