Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing kernel panic When there are memory-only nodes (nodes without CPUCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err() reports details of an objCheck if you run itEPSS 0.17%Oct 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging inCheck if you run itEPSS 0.16%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y syzbot reported a WARNING in est_timer() [1] PrCheck if you run itEPSS 0.15%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE With CONFIG_HIGHPTE on 32-bit ARM, move_pages_ptCheck if you run itEPSS 0.15%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bsearch to look for the 'cCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm When send a broadcast packCheck if you run itEPSS 0.33%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remaCheck if you run itEPSS 0.13%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() soc-generic-dmaengine-pcm.c uses saCheck if you run itEPSS 0.13%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The adapter->chan_stats[] array is initialized in mwifiexCheck if you run itEPSS 0.17%Oct 1, 2025
- High7.0ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitraCheck if you run itEPSS 0.19%Oct 1, 2025
- Medium6.1The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackersCheck if you run itEPSS 0.25%Oct 1, 2025
- High8.8An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R.Check if you run itEPSS 0.48%Oct 1, 2025
- Medium6.4The ZoloBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Gutenberg blocks in versions up to, and including, 2.3.10.Check if you run itEPSS 0.25%Oct 1, 2025
- Medium4.0The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via tCheck if you run itEPSS 0.30%Oct 1, 2025
- Medium5.9The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publiCheck if you run itEPSS 0.38%Oct 1, 2025
- Medium6.3Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability.Check if you run itEPSS 0.26%Oct 1, 2025
- Medium6.3Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability.Check if you run itEPSS 0.26%Oct 1, 2025
- High8.8TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function.Check if you run itEPSS 1.54%Oct 1, 2025
- Medium6.5TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCfg function.Check if you run itEPSS 1.02%Oct 1, 2025
- High8.8A reflected cross-site scripted (XSS) vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browserCheck if you run itEPSS 0.38%Oct 1, 2025
- Medium4.3IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details, bookmarks, and notifications of an arbitrary organization.Check if you run itEPSS 0.22%Oct 1, 2025
- Medium6.5Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id.Check if you run itEPSS 0.21%Oct 1, 2025
- Medium5.3Kazaar 1.25.12 allows a JWT with none in the alg field.Check if you run itEPSS 0.32%Oct 1, 2025
- High8.8DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking.Check if you run itEPSS 0.58%Oct 1, 2025
Sort