Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.T…Check if you run itEPSS 0.22%Mar 18, 2026
- Medium5.4The Yoast Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clone_bulk_action_handler() a…Check if you run itEPSS 0.20%Mar 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in perf_mmap Syzkaller reported a refcount_t: addition on 0; use-aCheck if you run itEPSS 0.14%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: secure_seq: add back ports to TS offset This reverts 28ee1b746f49 ("secure_seq: downgrade to per-host timesCheck if you run itEPSS 0.18%Mar 18, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration link_id is taken from the ML ReconfiguratioCheck if you run itEPSS 0.31%Mar 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: act_gate: snapshot parameters with RCU on replace The gate action can be replaced while the hrtimer cCheck if you run itEPSS 0.15%Mar 18, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvme_pr_read_keys() nvme_pr_read_keys() takes num_keys from userspace and uses itCheck if you run itEPSS 0.14%Mar 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/umad: Reject negative data_len in ib_umad_write ib_umad_write computes data_len from user-controlled countCheck if you run itEPSS 0.19%Mar 18, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix potential NULL pointer dereference in header processing If siw_get_hdr() returns -EINVAL before seCheck if you run itEPSS 0.67%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST We found an infinite loop bug in the ntfs3 file sCheck if you run itEPSS 0.15%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: check return value of indx_find to avoid infinite loop We found an infinite loop bug in the ntfs3 filCheck if you run itEPSS 0.15%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite loop bug in tCheck if you run itEPSS 0.15%Mar 18, 2026
- High8.6A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted filter expreCheck if you run itEPSS 0.59%Mar 18, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.Check if you run itEPSS 0.58%Mar 18, 2026
- High7.1A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized POST requestsCheck if you run itEPSS 0.21%Mar 18, 2026
- High7.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry containing malicCheck if you run itEPSS 0.29%Mar 18, 2026
- Medium5.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input.Check if you run itEPSS 0.41%Mar 18, 2026
- Medium6.5A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying uneCheck if you run itEPSS 0.36%Mar 18, 2026
- Medium4.9A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack bufferCheck if you run itEPSS 0.38%Mar 18, 2026
- Medium4.9A stack-based buffer overflow vulnerability in the device's file transfer parameter workflow allows a high-privileged attacker to send oversized POST parameters, causing memory corCheck if you run itEPSS 0.38%Mar 18, 2026
- High7.2A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that result in arbitrarCheck if you run itEPSS 1.08%Mar 18, 2026
- Medium6.5A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Overflow, resulting in a DoS attacCheck if you run itEPSS 0.43%Mar 18, 2026
- Low2.4A vulnerability found in Dahua NVR/XVR device.Check if you run itEPSS 0.31%Mar 18, 2026
- Medium6.1The Writeprint Stylometry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p' GET parameter in all versions up to and including 0.1.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.0Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.27%Mar 18, 2026
Sort