Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request.Check if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabilities in fbcon_do_set_font() wheCheck if you run itEPSS 0.17%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors fput() doesn't actually call file_operations release() synchCheck if you run itEPSS 0.11%Oct 15, 2025
- High8.6A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10.Check if you run itEPSS 0.53%Oct 15, 2025
- High7.5The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'tax_query' parameter in all versions up to, and including, 1.1 due to insufficient escapiCheck if you run itEPSS 0.43%Oct 15, 2025
- Medium6.5This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0.Check if you run itEPSS 0.21%Oct 15, 2025
- Critical9.3F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.30%Oct 15, 2025
- Medium6.4The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading shortcode in all versions up to, and including, 8.6.1.Check if you run itEPSS 0.21%Oct 15, 2025
- Medium6.4The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module in all versions up to, and including, 8.6.1.Check if you run itEPSS 0.21%Oct 15, 2025
- High8.5RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.5RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.5RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- Medium6.8A vulnerability exists in certain Dahua embedded products.Check if you run itEPSS 0.46%Oct 15, 2025
- High7.2In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.Check if you run itEPSS 0.14%Oct 15, 2025
- Medium6.4The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sCheck if you run itEPSS 0.23%Oct 15, 2025
- High7.3The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation in all versions up to, and includingCheck if you run itEPSS 0.23%Oct 15, 2025
- Medium4.3The Quick Featured Images plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 13.7.2 via the qfi_set_thumbnail and qfi_deleCheck if you run itEPSS 0.24%Oct 15, 2025
- Medium5.7In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.8The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theet_ajax_required_plugins_popup() function.Check if you run itEPSS 0.72%Oct 15, 2025
- Critical9.3DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumCheck if you run itEPSS 0.69%Oct 15, 2025
- High7.8Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current usCheck if you run itEPSS 0.27%Oct 15, 2025
- Medium5.5Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure.Check if you run itEPSS 0.24%Oct 15, 2025
- High7.8Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the currentCheck if you run itEPSS 0.27%Oct 15, 2025
- High7.8Animate versions 23.0.13, 24.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.25%Oct 15, 2025
- Medium5.5Animate versions 23.0.13, 24.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.22%Oct 15, 2025
Sort