Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks MT7996 driver can use both wed and wed_hCheck if you run itEPSS 0.53%Dec 24, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possibCheck if you run itEPSS 0.63%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function new_inode() returns a new inode with inode->i_mapping->gfp_maskCheck if you run itEPSS 0.22%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_xmit_one Neither sock4 nor sock6 pointers are guaranteed to be non-NULLCheck if you run itEPSS 0.22%Dec 24, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null durCheck if you run itEPSS 0.71%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() The acpi_get_first_physical_node() fCheck if you run itEPSS 0.23%Dec 24, 2025
- Medium5.0OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.Check if you run itEPSS 0.20%Dec 24, 2025
- Critical9.3PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module (categ=storage) of the opac_css/ajax.php endpoint that allows remote attacke…Check if you run itEPSS 0.61%Dec 23, 2025
- Critical9.8Cadmium CMS v.0.4.9 has a background arbitrary file upload vulnerability in /admin/content/filemanager/uploads.Check if you run itEPSS 0.38%Dec 23, 2025
- Medium4.0Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal.Check if you run itEPSS 0.40%Dec 23, 2025
- Critical9.8linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.Check if you run itEPSS 1.27%Dec 23, 2025
- Critical9.8Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.Check if you run itEPSS 1.18%Dec 23, 2025
- Medium6.5Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.Check if you run itEPSS 0.90%Dec 23, 2025
- Critical10.0eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.Check if you run itEPSS 0.31%Dec 23, 2025
- High8.7wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function…Check if you run itEPSS 0.46%Dec 22, 2025
- High8.7wb2osz/direwolf (Dire Wolf) versions up to and including 1.8.1, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kiss_rec_b…Check if you run itEPSS 0.51%Dec 22, 2025
- High7.5youlai-boot V2.21.1 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.44%Dec 22, 2025
- Medium6.1Schlix CMS before v2.2.9-5 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.19%Dec 22, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted There's issue when file systemCheck if you run itEPSS 0.55%Dec 22, 2025
- High7.2Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.Check if you run itEPSS 0.19%Dec 22, 2025
- High7.3Unquoted Search Path or Element vulnerability in NetBT Consulting Services Inc.Check if you run itEPSS 0.45%Dec 22, 2025
- High8.3Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0…Check if you run itEPSS 0.26%Dec 22, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- Critical9.3Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to ge…Check if you run itEPSS 0.53%Dec 22, 2025
- High8.9A security vulnerability has been detected in Tenda WH450 1.0.0.18.Check if you run itEPSS 1.00%Dec 22, 2025
Sort