Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc() The driver allocates memory for sensor data usinCheck if you run itEPSS 0.18%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: most: usb: Fix use-after-free in hdm_disconnect hdm_disconnect() calls most_deregister_interface(), which eventuCheck if you run itEPSS 0.21%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared between RSCI and aCheck if you run itEPSS 0.18%Dec 4, 2025
- High7.5Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attackers to delete arbitrary files via unspecified vectors.Check if you run itEPSS 0.41%Dec 4, 2025
- High7.8Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecifCheck if you run itEPSS 0.18%Dec 4, 2025
- Medium6.3A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings, and disable some non-critical functions.Check if you run itEPSS 0.37%Dec 4, 2025
- Medium5.1A flaw has been found in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.41%Dec 4, 2025
- High7.2A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.Check if you run itEPSS 0.64%Dec 4, 2025
- Medium4.3A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.Check if you run itEPSS 0.43%Dec 4, 2025
- Medium4.3A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.Check if you run itEPSS 0.43%Dec 4, 2025
- Medium5.4A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.Check if you run itEPSS 0.37%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace byCheck if you run itEPSS 0.18%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fuse: fix livelock in synchronous file put from fuseblk workers I observed a hang when running generic/323 againCheck if you run itEPSS 0.19%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Commit 05703271c3cd ("PCI/IOV: Add PCI rescan-removeCheck if you run itEPSS 0.22%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success DAMON's virtual address space operation set imCheck if you run itEPSS 0.19%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pidfs: validate extensible ioctls Validate extensible ioctls stricter than we do now.Check if you run itEPSS 0.17%Dec 4, 2025
- Low2.0A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.27%Dec 4, 2025
- Medium5.1A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.27%Dec 4, 2025
- Medium4.3Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-7280Check if you run itEPSS 0.38%Dec 4, 2025
- High7.5Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-Check if you run itEPSS 0.48%Dec 4, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUCheck if you run itEPSS 0.37%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however thCheck if you run itEPSS 0.14%Dec 4, 2025
- Medium4.8A weakness has been identified in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.29%Dec 4, 2025
- Medium5.1A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.43%Dec 4, 2025
- Medium6.1Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, pote…Check if you run itEPSS 0.17%Dec 4, 2025
Sort