Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.3Frappe Learning is a learning system that helps users structure their content.Check if you run itEPSS 0.23%Nov 12, 2025
- High7.2File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.Check if you run itEPSS 0.46%Nov 12, 2025
- High8.7The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in query parameters when accessing /PRESENTATION/HTML/TOP/INDEX.HTCheck if you run itEPSS 0.60%Nov 12, 2025
- Critical9.3FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based buffer overflow, as the HTTP service ('webs') fails to enforceCheck if you run itEPSS 2.18%Nov 12, 2025
- Medium6.9AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file handling frees an object and subsequently dereferences the staCheck if you run itEPSS 0.62%Nov 12, 2025
- High8.7JVC VN-T IP-camera models firmware versions up to 2016-08-22 (confirmed on the VN-T216VPRU model) contain a directory traversal vulnerability in the checkcgi endpoint that acceptsCheck if you run itEPSS 1.01%Nov 12, 2025
- Medium4.4sudo-rs is a memory safe implementation of sudo and su written in Rust.Check if you run itEPSS 0.18%Nov 12, 2025
- High8.7Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint.Check if you run itEPSS 1.54%Nov 12, 2025
- High8.7Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability.Check if you run itEPSS 2.24%Nov 12, 2025
- Medium6.9TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling (INI-file based) that can be abused to cause remote creation oCheck if you run itEPSS 0.41%Nov 12, 2025
- High8.7Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint.Check if you run itEPSS 0.74%Nov 12, 2025
- High8.6UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD.TKDrawCADCtrl.1 ActiveX control.Check if you run itEPSS 0.79%Nov 12, 2025
- Medium4.0cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos.Check if you run itEPSS 0.23%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware download failed Fix remove if firmware failed to load: qcom-iris aa0Check if you run itEPSS 0.18%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() v4l2_subdev_call_state_try() macro aCheck if you run itEPSS 0.20%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_objref: validate objref and objrefmap expressions Referencing a synproxy stateful object from OUTCheck if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfs_encode_fh() The function btrfs_encode_fh() does not properly accouCheck if you run itEPSS 0.15%Nov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant timCheck if you run itEPSS 0.47%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: listmount: don't call path_put() under namespace semaphore Massage listmount() and make sure we don't call path_Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit on the number of user messages had a number of issues, impropCheck if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths The usage of task_lockCheck if you run itEPSS 0.15%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfs_read_inode() Syskaller reports a "WARNING in ovl_copy_up_file"Check if you run itEPSS 0.21%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing on some 32-bit arches Helge reported that the introduction of PP_Check if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() Unlike other strings in the ext4 superbCheck if you run itEPSS 0.16%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device The device minor should not be cleared after the device is releaCheck if you run itEPSS 0.21%Nov 12, 2025
Sort