Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging inCheck if you run itEPSS 0.16%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y syzbot reported a WARNING in est_timer() [1] PrCheck if you run itEPSS 0.15%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE With CONFIG_HIGHPTE on 32-bit ARM, move_pages_ptCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryOct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bsearch to look for the 'cCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm When send a broadcast packCheck if you run itEPSS 0.33%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remaCheck if you run itEPSS 0.13%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() soc-generic-dmaengine-pcm.c uses saCheck if you run itEPSS 0.13%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to zero The adapter->chan_stats[] array is initialized in mwifiexCheck if you run itEPSS 0.17%Oct 1, 2025
- High7.0ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.18 in Java applications, allows an attacker to execute arbitraCheck if you run itEPSS 0.19%Oct 1, 2025
- Medium6.1The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackersCheck if you run itEPSS 0.25%Oct 1, 2025
- High8.8An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R.Check if you run itEPSS 0.48%Oct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- None0.0Not usedOpen the advisoryOct 1, 2025
- Medium6.4The ZoloBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Gutenberg blocks in versions up to, and including, 2.3.10.Check if you run itEPSS 0.25%Oct 1, 2025
- Medium4.0The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via tCheck if you run itEPSS 0.30%Oct 1, 2025
- Medium5.9The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publiCheck if you run itEPSS 0.38%Oct 1, 2025
- Medium6.3Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability.Check if you run itEPSS 0.26%Oct 1, 2025
Sort