Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms Commit 3ef9f710efcb ("pinctrl: mediateCheck if you run itEPSS 0.19%Jul 10, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: serial: jsm: fix NPE during jsm_uart_port_init No device was set which caused serial_base_ctrl_add to crash.Check if you run itEPSS 0.19%Jul 10, 2025
- Medium5.5The Lana Downloads Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the endpoint parameters in versions up to, and including, 1.10.0 due to insufficienCheck if you run itEPSS 0.30%Jul 10, 2025
- Medium5.6A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform limited privileged acCheck if you run itEPSS 0.13%Jul 10, 2025
- Medium6.1The Gwolle Guestbook plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘gwolle_gb_content’ parameter in all versions up to, and including, 4.9.2 due to insuCheck if you run itEPSS 0.24%Jul 10, 2025
- Unknownpluginrx broken_link_notifier Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.72%Jul 10, 2025
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityPatch nowKEVEPSS 93.88%Jul 10, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a userCheck if you run itEPSS 0.27%Jul 10, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body.Check if you run itEPSS 0.31%Jul 10, 2025
- High8.8Insecure Permissions vulnerability in the Local Storage in Alteryx Server 2023.1.1.460 allows remote attackers to obtain valid user session tokens from localStorage, leading to accCheck if you run itEPSS 0.51%Jul 10, 2025
- High8.0An issue in Alteryx Server v.2023.1.1.460 allows HTML injection via a crafted script to the pages component.Check if you run itEPSS 0.36%Jul 10, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted paylCheck if you run itEPSS 0.21%Jul 10, 2025
- Medium6.8An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theCheck if you run itEPSS 0.15%Jul 9, 2025
- Medium6.3An incorrect privilege assignment vulnerability in Palo Alto Networks Autonomous Digital Experience Manager allows a locally authenticated low privileged user on macOS endpoints toCheck if you run itEPSS 0.15%Jul 9, 2025
- Medium6.4The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, andCheck if you run itEPSS 0.27%Jul 9, 2025
- Medium6.1The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘calendar_header’ parameter in all versionsCheck if you run itEPSS 0.30%Jul 9, 2025
- High7.5The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and inCheck this weekEPSS 56.37%Jul 9, 2025
- Medium4.3IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only be available to privileged users.Check if you run itEPSS 0.23%Jul 9, 2025
- Medium4.3IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points related to workflow feature ofCheck if you run itEPSS 0.26%Jul 9, 2025
- Critical9.1Folo organizes feeds content into one timeline.Check if you run itEPSS 0.35%Jul 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate the request in nvme_tcp_handle_r2t() to ensure it's not part oCheck if you run itEPSS 0.45%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cache_set_flush() 1.Check if you run itEPSS 0.18%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances of uart devices are probing, a concurrencCheck if you run itEPSS 0.19%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: riscv: save the SR_SUM status over switches When threads/tasks are switched we need to ensure the old execution'Check if you run itEPSS 0.24%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots correctly [BUG] There is syzbot based reproducer that can crCheck if you run itEPSS 0.17%Jul 9, 2025
Sort