Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_reCheck if you run itEPSS 0.33%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generate_encryptionkey If client send two session setups with krb5Check this weekEPSS 11.89%Aug 19, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashVCheck this weekEPSS 45.00%Aug 19, 2025
- Unknowngurock testrail Direct Request ('Forced Browsing')Patch nowKEVEPSS 47.49%Aug 18, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() There are multiple smb2_ea_info buffers inCheck if you run itEPSS 0.51%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc.Check this weekEPSS 17.00%Aug 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading tCheck if you run itEPSS 0.43%Aug 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on STA interface When operating in concurrent STA/AP mode withCheck if you run itEPSS 0.19%Aug 16, 2025
- Medium6.1The weichuncai(WP伪春菜) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.Check this weekEPSS 14.00%Aug 16, 2025
- Medium6.1The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.Check this weekEPSS 18.00%Aug 16, 2025
- Medium6.1The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check this weekEPSS 18.00%Aug 16, 2025
- High7.5The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_activate_permission() permission callback for the /wp-json/presCheck this weekEPSS 51.00%Aug 16, 2025
- Medium6.1The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check this weekEPSS 18.00%Aug 16, 2025
- Medium6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check this weekEPSS 16.00%Aug 15, 2025
- Medium4.3A vulnerability in the DHCP client functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could aCheck if you run itEPSS 0.20%Aug 14, 2025
- High8.5A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token.Check this weekEPSS 16.00%Aug 14, 2025
- Critical9.8The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an aCheck this weekEPSS 44.00%Aug 14, 2025
- High8.4NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files.Check if you run itEPSS 0.51%Aug 13, 2025
- High8.7When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cCheck this weekEPSS 33.00%Aug 13, 2025
- Medium5.3OMERO.web provides a web based client and plugin infrastructure.Check this weekEPSS 26.00%Aug 13, 2025
- Critical9.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 7.50%Aug 13, 2025
- High7.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 2.14%Aug 13, 2025
- High8.8Using Codex CLI in workspace-write mode inside a malicious context (repo, directory, etc) could lead to arbitrary file overwrite and potentially remote code execution due to symlinCheck this weekEPSS 84.00%Aug 13, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafteCheck this weekEPSS 40.00%Aug 13, 2025
- High7.1Hydra is a continuous integration service for Nix based projects.Check this weekEPSS 20.00%Aug 12, 2025