Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_xmit_one Neither sock4 nor sock6 pointers are guaranteed to be non-NULLCheck if you run itEPSS 0.22%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341_transfer_one Discovered by Atuin - Automated VulnerabilityCheck if you run itEPSS 0.15%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in related to .Check if you run itEPSS 0.17%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: exfat: fix divide-by-zero in exfat_allocate_bitmap The variable max_ra_count can be 0 in exfat_allocate_bitmap()Check if you run itEPSS 0.18%Dec 24, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null durCheck if you run itEPSS 0.71%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in __blkdev_issue_zero_pages Move the fatal signal check before bio_alloc() to prevent aCheck if you run itEPSS 0.20%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read(Check if you run itEPSS 0.18%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream_formats() The function detect_stream_formats() reads the streamCheck if you run itEPSS 0.23%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() The acpi_get_first_physical_node() fCheck if you run itEPSS 0.23%Dec 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefront_send_sample() function has an inteCheck if you run itEPSS 0.21%Dec 24, 2025
- Medium4.1Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fail to verify that post actions invoking /share-issue-publicly were created by the JCheck if you run itEPSS 0.18%Dec 24, 2025
- Medium4.3Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 fails to validate user channel membership when attaching Mattermost posts as commentsCheck if you run itEPSS 0.19%Dec 24, 2025
- Low2.2ADB(Android Debug Bridge) is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability.Check if you run itEPSS 0.11%Dec 24, 2025
- Medium6.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Dec 24, 2025
- High8.2Cross-site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detailCheck if you run itEPSS 0.20%Dec 24, 2025
- High7.1Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component) and Hitachi Ops Center Analyzer (Hitachi Ops Center Analyzer detailCheck if you run itEPSS 0.22%Dec 24, 2025
- Medium6.9A flaw has been found in code-projects Student Information System 1.0.Check if you run itEPSS 0.38%Dec 24, 2025
- Medium5.1A vulnerability was detected in code-projects Student Information System 1.0.Check if you run itEPSS 0.26%Dec 24, 2025
- Medium5.3A security vulnerability has been detected in code-projects Student File Management System 1.0.Check if you run itEPSS 0.34%Dec 24, 2025
- Medium6.5An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a crafted URL.Check if you run itEPSS 0.19%Dec 24, 2025
- Critical9.8tychesoftwares print_invoice_\&_delivery_notes_for_woocommerce Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.71%Dec 24, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payCheck if you run itEPSS 0.27%Dec 24, 2025
- Medium6.5MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.Check if you run itEPSS 0.24%Dec 24, 2025
- Medium6.1MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.Check if you run itEPSS 0.22%Dec 24, 2025
- Medium6.9A vulnerability was identified in code-projects Online Farm System 1.0.Check if you run itEPSS 0.38%Dec 23, 2025
Sort