Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Object Injection.This issue affects MediCenter - Health MedicalCheck this weekEPSS 40.00%Aug 20, 2025
- Medium6.5Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks.Check this weekEPSS 22.00%Aug 19, 2025
- Medium5.4The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked intoCheck this weekEPSS 23.00%Aug 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsv_qp rsv_qp may be double destroyed in error flow, first in free_mr_init()Check this weekEPSS 18.00%Aug 19, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in tls_alert_reCheck if you run itEPSS 0.33%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in generate_encryptionkey If client send two session setups with krb5Check this weekEPSS 11.89%Aug 19, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashVCheck this weekEPSS 45.00%Aug 19, 2025
- Unknowngurock testrail Direct Request ('Forced Browsing')Patch nowKEVEPSS 47.49%Aug 18, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() There are multiple smb2_ea_info buffers inCheck if you run itEPSS 0.51%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc.Check this weekEPSS 17.00%Aug 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading tCheck if you run itEPSS 0.43%Aug 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on STA interface When operating in concurrent STA/AP mode withCheck if you run itEPSS 0.19%Aug 16, 2025
- Medium6.1The weichuncai(WP伪春菜) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.Check this weekEPSS 14.00%Aug 16, 2025
- Medium6.1The LatestCheckins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.Check this weekEPSS 18.00%Aug 16, 2025
- Medium6.1The Linux Promotional Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check this weekEPSS 18.00%Aug 16, 2025
- High7.5The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_activate_permission() permission callback for the /wp-json/presCheck this weekEPSS 51.00%Aug 16, 2025
- Medium6.1The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check this weekEPSS 18.00%Aug 16, 2025
- Medium6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check this weekEPSS 16.00%Aug 15, 2025
- Medium4.3A vulnerability in the DHCP client functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could aCheck if you run itEPSS 0.20%Aug 14, 2025
- High8.5A security issue in the runtime event system allows unauthenticated connections to receive a reusable API token.Check this weekEPSS 16.00%Aug 14, 2025
- Critical9.8The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an aCheck this weekEPSS 44.00%Aug 14, 2025
- High8.4NetOp (now part of Impero Software) Remote Control Client v9.5 is vulnerable to a stack-based buffer overflow when processing .dws configuration files.Check if you run itEPSS 0.51%Aug 13, 2025
- High8.7When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cCheck this weekEPSS 33.00%Aug 13, 2025
- Medium5.3OMERO.web provides a web based client and plugin infrastructure.Check this weekEPSS 26.00%Aug 13, 2025
- Critical9.7Cherry Studio is a desktop client that supports for multiple LLM providers.Check if you run itEPSS 7.50%Aug 13, 2025