Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profile_id POST parameter is passed to PHP unserialize()Check if you run itEPSS 0.61%Dec 4, 2025
- High8.8AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device iCheck if you run itEPSS 0.68%Dec 4, 2025
- High8.6The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly.Check if you run itEPSS 0.51%Dec 4, 2025
- High8.8The PostGallery plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'PostGalleryUploader' class functions in all versions up tCheck if you run itEPSS 0.76%Dec 4, 2025
- High8.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 4.43%Dec 4, 2025
- Medium5.1Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded content served from repositories.Check if you run itEPSS 0.33%Dec 4, 2025
- High8.7There is a relative path traversal vulnerability in the NI System Web Server that may result in information disclosure.Check if you run itEPSS 0.62%Dec 4, 2025
- High7.5auth0/node-jws is a JSON Web Signature implementation for Node.js.Check if you run itEPSS 0.21%Dec 4, 2025
- Medium5.3A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3.Check if you run itEPSS 0.30%Dec 4, 2025
- High8.7A weakness has been identified in H3C Magic B0 up to 100R002.Check if you run itEPSS 0.81%Dec 4, 2025
- High8.4A vulnerability exists in PX Enterprise whereby sensitive information may be logged under specific conditions.Check if you run itEPSS 0.13%Dec 4, 2025
- Medium4.8A vulnerability was identified in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.28%Dec 4, 2025
- Medium5.1A vulnerability was determined in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025
- Medium5.1A vulnerability was found in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share Verify the offset to prevent OOB access in the hyperCheck if you run itEPSS 0.15%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument being NCheck if you run itEPSS 0.22%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access If cros_ec_keyb_register_matrix() isn't called (due to ) in cCheck if you run itEPSS 0.19%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Input: imx_sc_key - fix memory corruption on unload This is supposed to be "priv" but we accidentally pass "&priCheck if you run itEPSS 0.14%Dec 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() nvme_fc_delete_assocation() waits for pCheck if you run itEPSS 0.56%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added In commit b441cf3f8c4bCheck if you run itEPSS 0.21%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() The ethtool tsconfig Netlink path can trigger aCheck if you run itEPSS 0.19%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: remove never-working support for setting nsh fields The validation of the set(nsh(...)) actionCheck if you run itEPSS 0.24%Dec 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Fix double-kfree The function 'mpc_rcvd_sweep_req(mpcginfo)' is called conditionally from function 'cCheck if you run itEPSS 0.30%Dec 4, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() The loops in 'qede_tpa_Check if you run itEPSS 0.60%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: devlink: rate: Unset parent pointer in devl_rate_nodes_destroy The function devl_rate_nodes_destroy is documenteCheck if you run itEPSS 0.15%Dec 4, 2025
Sort