Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() As the comment of pci_get_domain_bus_and_slot() says, itCheck if you run itEPSS 0.21%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe pm_runtime_get_sync() will increment pm usage couCheck if you run itEPSS 0.24%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_copy_file_range() If the file is used by swap, before return -EOPNOTSUPP, should freeCheck if you run itEPSS 0.20%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: zero out stale pointers allocates four pointers when obtaining type-c switch hanCheck if you run itEPSS 0.20%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: HSI: omap_ssi: Fix refcount leak in ssi_probe When returning or breaking early from a for_each_available_child_oCheck if you run itEPSS 0.24%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mmc: core: Fix kernel panic when remove non-standard SDIO card SDIO tuple is only allocated for standard SDIO caCheck if you run itEPSS 0.21%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the CPU mask allocation for a node fails, then the memory allocatedCheck if you run itEPSS 0.20%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search caused by bad boot loader inode We got a issue as fllows: =================Check if you run itEPSS 0.24%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_hw_read_lut() If "cpu_dev" fails to get opp table in qcom_cpufCheck if you run itEPSS 0.20%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_device_is_present() for VFs by checking PF pci_device_is_present() previously didn't work for VFs bCheck if you run itEPSS 0.21%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() I found a null pointer reference in arch_prCheck if you run itEPSS 0.20%Dec 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: power: supply: cw2015: Fix potential null-ptr-deref in cw_bat_probe() cw_bat_probe() calls create_singlethread_wCheck if you run itEPSS 0.20%Dec 9, 2025
- Critical9.8An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function create_xor_ipad_opad allowing attackers to pCheck if you run itEPSS 0.64%Dec 9, 2025
- Critical9.8Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection.Check if you run itEPSS 0.53%Dec 9, 2025
- High8.1OpenSIS 9.2 and below is vulnerable to Incorrect Access Control in Student.php, which allows an authenticated low-privilege user to perform unauthorized database write operations rCheck if you run itEPSS 0.29%Dec 9, 2025
- High8.8Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a denial of service via function handle_interface_POST_and_statCheck if you run itEPSS 0.33%Dec 9, 2025
- Medium6.1Cross Site Scripting (XSS) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to execute arbitrary code via the (1) config, (2) filename, or (3) extratext paCheck if you run itEPSS 0.42%Dec 9, 2025
- High7.5fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery (SSRF) vulnerability, which allows attackers to bypass private IP validation and access internal network reCheck if you run itEPSS 0.45%Dec 9, 2025
- Medium5.4A stored Cross-Site Scripting (XSS) vulnerability exists in the Coohom SaaS Platform feVersion=1760060603897 (2025-10-28) in the Account Settings module, where unsanitized user inpCheck if you run itEPSS 0.20%Dec 9, 2025
- Medium6.1A stored Cross site scripting (XSS) vulnerability in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) router allows a remote attacker on the LAN to inject JavaScript inCheck if you run itEPSS 0.32%Dec 9, 2025
- Medium6.5A buffer overflow in the Mercury MR816v2 (081C3114 4.8.7 Build 110427 Rel 36550n) occurs when the device accepts and stores excessively long hostnames from LAN hosts without properCheck if you run itEPSS 0.40%Dec 9, 2025
- High7.5An unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary files.Check if you run itEPSS 0.82%Dec 9, 2025
- Medium6.5A NULL pointer dereference vulnerability in the util.readFileIntoStream component of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoS) via a crafteCheck if you run itEPSS 0.30%Dec 9, 2025
- Medium6.5A NULL pointer dereference vulnerability in the importDataObject() function of PDF-XChange Editor v10.7.3.401 allows attackers to cause a Denial of Service (DoS) via a crafted inpuCheck if you run itEPSS 0.30%Dec 9, 2025
- Critical9.8SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, includiCheck if you run itEPSS 0.41%Dec 9, 2025
Sort