Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6.Check if you run itEPSS 0.25%Aug 28, 2025
- Medium5.4The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to insufficientCheck if you run itEPSS 0.24%Aug 28, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.02%Aug 28, 2025
- Critical9.8D-Link dir-868l_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.97%Aug 28, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Object Injection.This issue affects ThemeREX Addons: from n/a through 2.36.1.1.Patch nowKEVEPSS 0.53%Aug 27, 2025
- Critical9.2Citrix NetScaler Memory Overflow VulnerabilityPatch nowKEVEPSS 20.67%Aug 26, 2025
- Low2.0A security vulnerability has been detected in FNKvision Y215 CCTV Camera 10.194.120.40.Check if you run itEPSS 0.10%Aug 24, 2025
- High8.5A vulnerability was identified in FNKvision Y215 CCTV Camera 10.194.120.40.Check if you run itEPSS 0.15%Aug 24, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled trigger…Check if you run itEPSS 0.21%Aug 22, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: [ceph] parse_longname(): strrchr() expects NUL-terminated string ...Check if you run itEPSS 0.40%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that it is the only node that has the filesysCheck if you run itEPSS 0.17%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Preserve the error code if iwl_setup_deferred_work() faCheck if you run itEPSS 0.21%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde->proc_ops->proc_lseeCheck if you run itEPSS 0.18%Aug 22, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() Callers of wdev_chandef() must hold the wiphy mCheck if you run itEPSS 0.19%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf().Check if you run itEPSS 0.17%Aug 22, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nfacct: don't assume acct name is null-terminated BUG: KASAN: slab-out-of-bounds in ..Check if you run itEPSS 0.19%Aug 22, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock,Check if you run itEPSS 0.40%Aug 22, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA If we have a non-DATA record on the rx_list and anoCheck if you run itEPSS 0.36%Aug 22, 2025
- Medium6.8Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of servicCheck if you run itEPSS 0.92%Aug 22, 2025
- High8.7Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potCheck if you run itEPSS 4.46%Aug 22, 2025
- Low3.5agent-zero agent-zero Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.12%Aug 21, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 13.08%Aug 20, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 65.16%Aug 20, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() In ath12k_dp_tx_get_encap_t…Check if you run itEPSS 0.20%Aug 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port Each window of a vop2…Check if you run itEPSS 0.21%Aug 19, 2025
Sort