Vulnerabilities
VEX
CWE
ATT&CK
KEV Catalogs
All catalogs
Catalogue scorecard
GCVE
CISA
CIRCL
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Statistics
Log in
About
Search term
Success
← All credits
Neil Berkman
2 vulnerability records and advisories credit this contributor.
CVE-2026-107685
WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers
CVE-2026-105963
Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments