Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) According to UFS specifications…Check if you run itEPSS 0.19%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: scmi: Fix genpd leak on provider registration failure If of_genpd_add_provider_onece…Check if you run itEPSS 0.21%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_state() For built with CONFIG_PREEMPT_RT=y kernels, t…Check if you run itEPSS 0.20%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Add devm release action to safely tear down CT When a buffer object (BO) is allocated w…Check if you run itEPSS 0.20%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link->enc NULL pointer access [why] 1.) dc->links[…Check if you run itEPSS 0.15%Dec 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site Request Forgery.This issue affects Freshchat: from n/a through <= 2.3.4.Check if you run itEPSS 0.13%Dec 16, 2025
- Medium6.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.32%Dec 16, 2025
- Medium4.7An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.29%Dec 15, 2025
- Critical9.1In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows…Check if you run itEPSS 0.29%Dec 15, 2025
- Unknownappsmith appsmith Improper Access ControlPatch nowKEVEPSS 30.66%Dec 15, 2025
- UnknownTOTOLINK a3002ru Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Dec 15, 2025
- High7.0OpenPLC_V3 is vulnerable to a cross-site request forgery (CSRF) attack due to the absence of proper CSRF validation.Check if you run itEPSS 0.29%Dec 13, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.Check if you run itEPSS 0.25%Dec 12, 2025
- Low3.7AzuraCast is a self-hosted, all-in-one web radio management suite.Check if you run itEPSS 0.25%Dec 12, 2025
- Medium6.1Masa CMS is an open source Enterprise Content Management platform.Check if you run itEPSS 0.25%Dec 12, 2025
- Medium4.9The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the 'wht_download_big_object_origin' parameter in all versions up to, and including, 3.16.0.Check if you run itEPSS 0.51%Dec 12, 2025
- High7.1Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityPatch nowKEVEPSS 53.30%Dec 12, 2025
- Medium5.3quic-go is an implementation of the QUIC protocol in Go.Check if you run itEPSS 0.36%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the modu…Check if you run itEPSS 2.07%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in fi…Check if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /u…Check if you run itEPSS 3.14%Dec 11, 2025
- High7.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to…Check if you run itEPSS 1.30%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request…Check if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to…Check if you run itEPSS 2.64%Dec 11, 2025
- High8.8OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to…Check if you run itEPSS 2.57%Dec 11, 2025
Sort