Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path If this memdup_user() call fails, the memory allocated in a prCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore itsCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: init quota for 'old.inode' in 'ext4_rename' Syzbot found the following issue: ext4_parse_param: s_want_extCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix null-ptr-deref in ext4_write_info I caught a null-ptr-deref bug as follows: ==========================Check if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_device() fails Patch series "rapidio: fix three possible memory leCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: floppy: Fix memory leak in do_floppy_init() A memory leak was reported when floppy_alloc_disk() failed in do_floCheck if you run itEPSS 0.16%Sep 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix oops during encryption When running xfstests against Azure the following oops occurred on an arm64 sysCheck if you run itEPSS 0.11%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: vimc: Fix wrong function called when vimc_init() fails In vimc_init(), when platform_driver_register(&vimCheck if you run itEPSS 0.16%Sep 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: avoid hci_dev_test_and_set_flag() in mgmt_init_hdev() syzbot is again reporting attempt to cancel uniCheck if you run itEPSS 0.11%Sep 16, 2025
- Medium6.9Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 throughCheck if you run itEPSS 0.40%Sep 16, 2025
- Low2.1WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime.Check if you run itEPSS 0.37%Sep 16, 2025
- Critical10.0Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.Patch nowKEVEPSS 3.67%Sep 16, 2025
- High7.4A flaw was found in Podman.Check if you run itEPSS 0.64%Sep 16, 2025
- High7.4IBM AIX 7.2, 7.3, IBM VIOS 3.1, and 4.1, when configured to use Kerberos network authentication, could allow a local user to write to files on the system with root privileges due tCheck if you run itEPSS 0.12%Sep 16, 2025
- Critical9.3Talkative IRC v0.4.4.16 is vulnerable to a stack-based buffer overflow when processing specially crafted response strings sent to a connected client.Check if you run itEPSS 1.70%Sep 16, 2025
- Critical9.3osCommerce versions up to and including 2.2 RC2a contain a vulnerability in its administrative file manager utility (admin/file_manager.php).Check if you run itEPSS 1.60%Sep 16, 2025
- Critical9.3A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1.Check if you run itEPSS 1.69%Sep 16, 2025
- High8.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E1 Informatics Web Application allows SQL Injection.Check if you run itEPSS 0.33%Sep 16, 2025
- High7.8A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability.Check if you run itEPSS 0.17%Sep 16, 2025
- High8.1The mcp-database-server (MCP Server) 1.1.0 and earlier, as distributed via the npm package @executeautomation/database-server, fails to implement adequate security controls to propCheck if you run itEPSS 0.40%Sep 16, 2025
- High7.8A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.17%Sep 16, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE - 200 - Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arma SCheck if you run itEPSS 0.43%Sep 16, 2025
- Medium6.5Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global TechnologieCheck if you run itEPSS 0.29%Sep 16, 2025
- Critical9.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements inCheck if you run itEPSS 0.34%Sep 16, 2025
- Medium5.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Holistic IT, Consultancy Coop.Check if you run itEPSS 0.26%Sep 16, 2025
Sort