Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8NVIDIA Display Driver for Linux contains a vulnerability in the NVIDIA kernel module where an attacker could cause an integer overflow or wraparound.Check if you run itEPSS 0.20%Jan 28, 2026
- High7.8NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where an attacker could cause an integer overflow.Check if you run itEPSS 0.20%Jan 28, 2026
- High7.8NVIDIA Display Driver for Windows contains a vulnerability where an attacker could trigger a use after free.Check if you run itEPSS 0.20%Jan 28, 2026
- High8.7PDW File Browser 1.3 contains a remote code execution vulnerability that allows authenticated users to upload and rename webshell files to arbitrary web server locations.Check if you run itEPSS 0.49%Jan 28, 2026
- High8.8SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that allows attackers to extract database information.Check if you run itEPSS 0.34%Jan 28, 2026
- High8.4Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter.Check if you run itEPSS 0.18%Jan 28, 2026
- Medium6.9PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system files by manipulating the 'chemin' parameter.Check if you run itEPSS 0.29%Jan 28, 2026
- High8.7M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter.Check if you run itEPSS 0.50%Jan 28, 2026
- High7.1M/Monit 3.7.4 contains an authentication vulnerability that allows authenticated attackers to retrieve user password hashes through an administrative API endpoint.Check if you run itEPSS 0.48%Jan 28, 2026
- High8.4Zortam Mp3 Media Studio 27.60 contains a buffer overflow vulnerability in the library creation file selection process that allows remote code execution.Check if you run itEPSS 0.61%Jan 28, 2026
- High8.7Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files.Check if you run itEPSS 0.41%Jan 28, 2026
- Medium5.3Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export.Check this weekEPSS 12.36%Jan 28, 2026
- High8.410-Strike Network Inventory Explorer 8.65 contains a buffer overflow vulnerability in exception handling that allows remote attackers to execute arbitrary code.Check if you run itEPSS 0.56%Jan 28, 2026
- Medium6.9ILIAS Learning Management System 4.3 contains a server-side request forgery vulnerability that allows attackers to read local files through portfolio PDF export functionality.Check if you run itEPSS 0.22%Jan 28, 2026
- Medium5.5The issue was addressed with improved bounds checks.Check if you run itEPSS 0.15%Jan 28, 2026
- Medium6.7Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereCheck if you run itEPSS 0.16%Jan 28, 2026
- Medium6.9A weakness has been identified in Open5GS up to 2.7.6.Check if you run itEPSS 0.73%Jan 28, 2026
- Medium5.8A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations.Check if you run itEPSS 0.27%Jan 28, 2026
- Medium5.8A flaw was found in libsoup.Check if you run itEPSS 0.34%Jan 28, 2026
- Medium6.9A security flaw has been discovered in Open5GS up to 2.7.6.Check if you run itEPSS 0.61%Jan 28, 2026
- Medium4.8A vulnerability was identified in rethinkdb up to 2.4.3.Check if you run itEPSS 0.26%Jan 28, 2026
- Medium5.3The WP Adminify plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.0.7.7 via the /wp-json/adminify/v1/get-addons-list RESTCheck if you run itEPSS 0.29%Jan 28, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: Ensure swevent hrtimer is properly destroyed With the change to hrtimer_try_to_cancel() in perf_swevent_caCheck if you run itEPSS 0.13%Jan 28, 2026
- Medium4.3The Stop Spammers Classic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2026.1.Check if you run itEPSS 0.18%Jan 28, 2026
- High8.5Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nordvpn-service that allows local attackers to execute code with elevated privileges.Check if you run itEPSS 0.17%Jan 28, 2026
Sort