Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() Sometimes, when a file was read while it was beinCheck if you run itEPSS 0.18%Jul 10, 2025
- Medium6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘calendar_header’ parameter in all versionsCheck this weekEPSS 30.00%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blamed commit missed that vcc_destroy_socket() calls clip_push() wiCheck if you run itEPSS 0.18%Jul 9, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when reconnecting channels Fix cifs_signal_cifsd_for_reconnect() to take theCheck if you run itEPSS 0.25%Jul 9, 2025
- Medium5.3IBM OpenPages with Watson 8.3 and 9.0 is vulnerable to improper input validation due to bypassing of client-side validation for the data types and requiredness of fields for GRC ObCheck if you run itEPSS 0.27%Jul 8, 2025
- Medium6.3Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases.Check if you run itEPSS 1.08%Jul 7, 2025
- High7.5Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 1.19%Jul 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with unaligned file size The generic/397 test hits a BUG_ON for the cCheck if you run itEPSS 0.11%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automount_fullpath page is checked for null in __build_path_from_dentry_optional_Check if you run itEPSS 0.18%Jul 4, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in destroy_previous_session If client set ->PreviousSessionId on kerberos seCheck if you run itEPSS 1.42%Jul 4, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().Check if you run itEPSS 0.56%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() This fixes the following problem: [ 749.901015Check if you run itEPSS 0.19%Jul 4, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Escalation.Check if you run itEPSS 0.36%Jul 4, 2025
- Medium4.3The WP Firebase Push Notification plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0.Check this weekEPSS 15.00%Jul 4, 2025
- Medium4.1wire-ios is an iOS client for the Wire secure messaging application.Check this weekEPSS 17.00%Jul 3, 2025
- Medium6.5The VNC authentication mechanism bases on a challenge-response system where both server and client use the same password for encryption.Check if you run itEPSS 0.21%Jul 3, 2025
- Medium6.5All communication between the VNC server and client(s) is unencrypted.Check if you run itEPSS 0.29%Jul 3, 2025
- Medium4.3The web application is vulnerable to clickjacking attacks.Check if you run itEPSS 0.34%Jul 3, 2025
- High7.4The web application is susceptible to cross-site-scripting attacks.Check if you run itEPSS 0.35%Jul 3, 2025
- Medium6.1A vulnerability in the web UI of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack againstCheck if you run itEPSS 0.29%Jul 2, 2025
- Critical9.3A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol (MCP) Server via automatic link unfurling.Check if you run itEPSS 0.43%Jul 2, 2025
- Medium4.9A missing double-check feature in the WebGUI for CLI deactivation in Infinera G42 version R6.1.3 allows an authenticated administrator to make other management interfaces unavailabCheck if you run itEPSS 0.38%Jul 2, 2025
- Medium6.5Unrestricted access to OS file system in SFTP service in Infinera G42 version R6.1.3 allows remote authenticated users to read/write OS files via SFTP connections.Check if you run itEPSS 0.39%Jul 2, 2025
- Medium6.5Lack or insufficent input validation in WebGUI CLI web in Infinera G42 version R6.1.3 allows remote authenticated users to read all OS files via crafted CLI commands.Check if you run itEPSS 0.53%Jul 2, 2025
- Medium6.1The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email and wpmp_reset_password_token parameters in all versions up tCheck if you run itEPSS 0.24%Jul 2, 2025