Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.Check if you run itEPSS 0.64%Dec 4, 2025
- Medium4.3A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.Check if you run itEPSS 0.43%Dec 4, 2025
- Medium4.3A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.Check if you run itEPSS 0.43%Dec 4, 2025
- Medium5.4A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.Check if you run itEPSS 0.37%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data Fix potential leak of uninitialized stack data to userspace byCheck if you run itEPSS 0.18%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fuse: fix livelock in synchronous file put from fuseblk workers I observed a hang when running generic/323 againCheck if you run itEPSS 0.19%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Commit 05703271c3cd ("PCI/IOV: Add PCI rescan-removeCheck if you run itEPSS 0.22%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pte_offset_map_lock() until success DAMON's virtual address space operation set imCheck if you run itEPSS 0.19%Dec 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pidfs: validate extensible ioctls Validate extensible ioctls stricter than we do now.Check if you run itEPSS 0.17%Dec 4, 2025
- Low2.0A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.27%Dec 4, 2025
- Medium5.1A security vulnerability has been detected in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.27%Dec 4, 2025
- Medium4.3Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-7280Check if you run itEPSS 0.38%Dec 4, 2025
- High7.5Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-Check if you run itEPSS 0.48%Dec 4, 2025
- Critical9.6Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUCheck if you run itEPSS 0.37%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignment There is no guaranteed alignment for user pointers, however thCheck if you run itEPSS 0.14%Dec 4, 2025
- Medium4.8A weakness has been identified in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.29%Dec 4, 2025
- Medium5.1A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.1.Check if you run itEPSS 0.43%Dec 4, 2025
- Medium6.1Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, pote…Check if you run itEPSS 0.17%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp fallback tunnels currently get deleted (from the various listsCheck if you run itEPSS 0.14%Dec 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge().Check if you run itEPSS 0.18%Dec 4, 2025
- Medium5.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.Check if you run itEPSS 0.20%Dec 4, 2025
- Medium5.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.Check if you run itEPSS 0.20%Dec 4, 2025
- Medium5.5A flaw was found in ansible-collection-community-general.Check if you run itEPSS 0.19%Dec 4, 2025
- Medium4.8The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0.Check if you run itEPSS 0.30%Dec 4, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4.Check if you run itEPSS 0.26%Dec 4, 2025
Sort