Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allCheck this weekEPSS 65.00%May 22, 2025
- High7.2Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation.Check this weekEPSS 53.00%May 22, 2025
- Medium4.1Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNXCheck this weekEPSS 10.68%May 22, 2025
- Medium4.3Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input DCheck this weekEPSS 30.00%May 22, 2025
- Medium5.3Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input DataCheck this weekEPSS 36.00%May 22, 2025
- Medium5.3Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.Check this weekEPSS 32.00%May 22, 2025
- Medium6.8Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis.Check this weekEPSS 35.00%May 22, 2025
- High7.7Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, LinuxCheck this weekEPSS 36.00%May 22, 2025
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check this weekEPSS 60.00%May 21, 2025
- Medium5.3The Open edX Platform is a learning management platform.Check this weekEPSS 46.00%May 21, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix out-of-bound memcpy() during ethtool -w When retrieving the FW coredump using ethtool, it can sometCheck if you run itEPSS 0.24%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix error handling path in bnxt_init_chip() WARN_ON() is triggered in __flush_work() if bnxt_init_chip(Check if you run itEPSS 0.20%May 20, 2025
- Low2.3Kirby is an open-source content management system.Check if you run itEPSS 0.59%May 13, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running butCheck if you run itEPSS 0.28%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Avoid order-5 memory allocation for TPA data The driver needs to keep track of all the possible concurrCheck this weekEPSS 19.00%May 2, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() When performing a stress test on SMC-R by rmmod mlx5_ib drCheck this weekEPSS 48.00%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: firmware: xilinx: don't make a sleepable memory allocation from an atomic context The following issue was discovCheck this weekEPSS 15.00%May 2, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do nCheck this weekEPSS 21.00%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix warning when handle discover_identity message Since both source and sink device can send dCheck this weekEPSS 20.00%May 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() nxp_nci_send() will call nxp_nci_i2c_write(), and onlyCheck this weekEPSS 19.00%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() During the error recovery sequence, the rtnl_lock is not helCheck this weekEPSS 22.00%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: can: j1939: j1939_send_one(): fix missing CAN header initialization The read access to struct canxl_frame::len iCheck this weekEPSS 22.00%May 1, 2025
- Low3.5Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.Check this weekEPSS 22.00%Apr 27, 2025
- High7.7An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.Check this weekEPSS 84.00%Apr 22, 2025
- High8.8The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path.Check this weekEPSS 57.00%Apr 21, 2025