Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration link_id is taken from the ML ReconfiguratioCheck if you run itEPSS 0.31%Mar 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer cCheck if you run itEPSS 0.15%Mar 18, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvme_pr_read_keys() nvme_pr_read_keys() takes num_keys from userspace and uses itCheck if you run itEPSS 0.14%Mar 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled countCheck if you run itEPSS 0.19%Mar 18, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() returns -EINVAL before seCheck if you run itEPSS 0.67%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infinite loop bug in the ntfs3 file sCheck if you run itEPSS 0.15%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in the ntfs3 filCheck if you run itEPSS 0.15%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite loop bug in tCheck if you run itEPSS 0.15%Mar 18, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.Check if you run itEPSS 0.58%Mar 18, 2026
- High8.6A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted…Check if you run itEPSS 0.59%Mar 18, 2026
- High7.1A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized P…Check if you run itEPSS 0.21%Mar 18, 2026
- High7.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry con…Check if you run itEPSS 0.29%Mar 18, 2026
- Medium5.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input.Check if you run itEPSS 0.41%Mar 18, 2026
- Medium6.5A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by…Check if you run itEPSS 0.36%Mar 18, 2026
- Medium4.9A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size…Check if you run itEPSS 0.38%Mar 18, 2026
- Medium4.9A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send oversized POST parameters, causi…Check if you run itEPSS 0.38%Mar 18, 2026
- High7.2A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that resul…Check if you run itEPSS 1.08%Mar 18, 2026
- Medium6.5A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Overflow, resulting i…Check if you run itEPSS 0.43%Mar 18, 2026
- Low2.4A vulnerability found in Dahua NVR/XVR device.Check if you run itEPSS 0.31%Mar 18, 2026
- High7.0Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.27%Mar 18, 2026
- Medium5.9The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attac…Check if you run itEPSS 0.17%Mar 18, 2026
- Medium6.1The Writeprint Stylometry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p' GET parameter in all versions up to and including 0.1.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.6IncusOS is an immutable OS image dedicated to running Incus.Check if you run itEPSS 0.15%Mar 18, 2026
- High8.7Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 1.69%Mar 18, 2026
- High8.7The Azure Blob Storage for Craft CMS plugin provides an Azure Blob Storage integration for Craft CMS.Check if you run itEPSS 0.39%Mar 18, 2026
Sort