Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5PerfreeBlog v4.0.11 is vulnerable to Server-Side Request Forgery due to a missing authorization check in the uploadAttachByUrl API endpoint (AttachController.java).Check if you run itEPSS 0.26%Oct 30, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses Sanitize possible addl_desc_ptr out-of-bounds accesCheck if you run itEPSS 0.31%Oct 29, 2025
- Medium6.5SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.Check if you run itEPSS 0.27%Oct 29, 2025
- Critical9.8dnnsoftware DotNetNuke (DNN) Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 46.97%Oct 28, 2025
- High7.1hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()Check if you run itEPSS 0.19%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() Cast nr_pages to unsigned long to avoid overflow when handlingCheck if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets.Check if you run itEPSS 0.21%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warning on the following sock_addr progCheck if you run itEPSS 0.24%Oct 28, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: use dst_dev_net_rcu() Replace three dst_dev() with a lockdep enabled helper.Check if you run itEPSS 0.49%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commit 2a934fdb01db ("media:Check if you run itEPSS 0.24%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged Architecture Spec, wheCheck if you run itEPSS 0.24%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race in do_task() when draining When do_task() exhausts its iteration budget (!ret), it sets the sCheck if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store.Check if you run itEPSS 0.25%Oct 28, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copy_thresh allocation failure The driver did not handle failure of .Check if you run itEPSS 0.63%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Modify the return value check The return value of copy_from_iter and copy_to_iter can't be negatiCheck if you run itEPSS 0.17%Oct 28, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrupt mask Remove the logic to set interrupt mask by default in uCheck if you run itEPSS 0.64%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling When parsing Allocation Extent Descriptor, lengthAllocDescs cCheck if you run itEPSS 0.17%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.60Check if you run itEPSS 0.38%Oct 28, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpaths in SVM's VCheck if you run itEPSS 0.18%Oct 28, 2025
- High7.9In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction tCheck if you run itEPSS 0.17%Oct 28, 2025
- Critical9.8zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.Check if you run itEPSS 0.53%Oct 28, 2025
- High8.6rocketsoftware trufusion_enterprise Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.00%Oct 27, 2025
- High7.6A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack.Check if you run itEPSS 0.71%Oct 27, 2025
- Critical9.8D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.Check if you run itEPSS 0.41%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup.Check if you run itEPSS 0.37%Oct 24, 2025
Sort