Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() A fix for: BUG: KASAN: slab-out-of-bounds in sCheck if you run itEPSS 0.29%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ubi: Fix use-after-free when volume resizing failed There is an use-after-free problem reported by KASAN: ======Check if you run itEPSS 0.14%Dec 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to avoid use-after-free issue Don't collect exiting session in smb2_rCheck if you run itEPSS 0.51%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Zeroing allocated object from slab in bpf memory allocator Currently the freed element in bpf memory allocaCheck if you run itEPSS 0.15%Dec 9, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: don't assume adequate headroom for SDIO headers mt7921_usb_sdio_tx_prepare_skb() calls mt7921_usb_Check if you run itEPSS 0.27%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in tcp_write_timer_handler().Check if you run itEPSS 0.14%Dec 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference state management for synchronous callbacks Currently, verifier verifies callback functions (sCheck if you run itEPSS 0.16%Dec 9, 2025
- Medium6.5A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without properCheck if you run itEPSS 0.40%Dec 9, 2025
- High7.5An unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary files.Check if you run itEPSS 0.82%Dec 9, 2025
- Critical9.8SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, includiCheck if you run itEPSS 0.41%Dec 9, 2025
- Medium4.3SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administraCheck if you run itEPSS 0.22%Dec 9, 2025
- Medium4.3An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modiCheck if you run itEPSS 0.24%Dec 9, 2025
- Medium4.3An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.Check if you run itEPSS 0.26%Dec 9, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to inject arbitrary web script or HTCheck if you run itEPSS 0.26%Dec 9, 2025
- High7.8Microsoft Windows Use After Free VulnerabilityPatch nowKEVEPSS 2.50%Dec 9, 2025
- High8.1Multiple Incorrect Access Control vulnerabilities in adata Software GmbH Mitarbeiterportal 2.15.2.0 allow remote authenticated, low-privileged users to carry out administrative funCheck if you run itEPSS 0.54%Dec 9, 2025
- Medium4.6A stored Cross Site Scripting (XSS) vulnerability in the bulletin board (SchwarzeBrett) in adata Software GmbH Mitarbeiter Portal 2.15.2.0 allows remote authenticated users to execCheck if you run itEPSS 0.34%Dec 9, 2025
- High8.8LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files.Check if you run itEPSS 0.77%Dec 9, 2025
- Medium6.1NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.27%Dec 8, 2025
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.66%Dec 8, 2025
- Medium5.9c-ares is an asynchronous resolver library.Check if you run itEPSS 0.43%Dec 8, 2025
- Medium6.9A vulnerability has been found in IdeaCMS up to 1.8.Check if you run itEPSS 0.39%Dec 8, 2025
- High8.3In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting (XSS).Check if you run itEPSS 0.29%Dec 8, 2025
- High7.0Some endpoints in vulnerability-lookup that modified application state (e.g.Check if you run itEPSS 0.17%Dec 8, 2025
- Medium4.8A flaw has been found in GreenCMS 2.3.0603.Check if you run itEPSS 0.27%Dec 8, 2025
Sort