Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages usiCheck if you run itEPSS 0.14%Dec 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd In snd_usb_create_streams(), for UACheck if you run itEPSS 0.19%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying When unbinding a memslot from a guest_mCheck if you run itEPSS 0.14%Dec 6, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4_free_ol_stateid() Typically copynotify stateid is freed either when parentCheck if you run itEPSS 0.43%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file createdCheck if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is erased from subdir rbtree through rb_erase(), but not set the nodeCheck if you run itEPSS 0.46%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix potential UAF issue for VMA readahead Since commit 78524b05f1a3 ("mm, swap: avoid redundant swap dCheck if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transfCheck if you run itEPSS 0.18%Dec 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cifs: client: fix memory leak in smb3_fs_context_parse_param The user calls fsconfig twice, but when the programCheck if you run itEPSS 0.19%Dec 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: ensure allocated iovec gets cleared for early failure A previous commit reused the recyling infrastCheck if you run itEPSS 0.17%Dec 6, 2025
- High8.7A flaw has been found in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.81%Dec 6, 2025
- High7.1A vulnerability was detected in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.61%Dec 6, 2025
- Medium6.9A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.95%Dec 6, 2025
- High8.7A security flaw has been discovered in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 1.12%Dec 6, 2025
- High8.7A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 0.87%Dec 6, 2025
- High8.7A vulnerability was determined in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 0.87%Dec 6, 2025
- High8.7A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 0.87%Dec 6, 2025
- High8.7A vulnerability has been found in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06.Check if you run itEPSS 0.40%Dec 6, 2025
- High8.8The Starter Templates plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4.4.41.Check this weekEPSS 13.51%Dec 6, 2025
- High8.8The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the resolve_import_directory() function in versionsCheck if you run itEPSS 0.52%Dec 6, 2025
- High7.2The Rich Shortcodes for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contents of a Google Review in all versions up to, and including, 6Check if you run itEPSS 0.38%Dec 6, 2025
- Critical9.6The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validatioCheck if you run itEPSS 0.51%Dec 6, 2025
- Medium5.3The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions upCheck if you run itEPSS 0.28%Dec 6, 2025
- Medium5.3The Accessiy By CodeConfig Accessibility plugin for WordPress is vulnerable to unauthorized page creation due to missing authorization checks in versions up to, and including, 1.0.Check if you run itEPSS 0.28%Dec 6, 2025
- Medium6.1The CSV Sumotto plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the variable in all versions up to, and including, 1.0 due to insufficient input sanitizatiCheck if you run itEPSS 0.21%Dec 6, 2025
Sort