Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck this weekEPSS 49.00%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck this weekEPSS 49.00%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck this weekEPSS 49.00%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The ns_bpf_qdisc selftest triggers a kernel panic: UnaCheck if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copy_to_iter return value check The return value of copy_to_iter can't be negative, check wheCheck if you run itEPSS 0.22%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: smb: client: fix crypto buffers in non-linear memory The crypto API, through the scatterlist API, expects inputCheck if you run itEPSS 0.22%Oct 28, 2025
- High8.6In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request can receive more than wasCheck if you run itEPSS 0.35%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference There is a critical race cCheck if you run itEPSS 0.23%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign-extend struct ops return values properly The ns_bpf_qdisc selftest triggers a kernel panic:Check if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_helper(), fix incorrect error handling for a call to iov_iter_extCheck if you run itEPSS 0.21%Oct 28, 2025
- High7.9In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction tCheck if you run itEPSS 0.17%Oct 28, 2025
- Medium5.5Uncontrolled Resource ConsumptionPatch nowKEVEPSS 0.28%Oct 28, 2025
- High7.5Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.Check this weekEPSS 32.00%Oct 28, 2025
- High7.5Relative Path Traversal vulnerability in Apache Tomcat.Check this weekEPSS 64.41%Oct 27, 2025
- High8.7A vulnerability has been found in Tenda AC6 15.03.06.50.Check if you run itEPSS 1.03%Oct 27, 2025
- Medium4.8A vulnerability has been found in Kamailio 5.5.Check if you run itEPSS 0.23%Oct 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Waituk Entrada theme allows Cross Site Request Forgery.This issue affects Entrada: from n/a through 5.7.7.Check if you run itEPSS 0.12%Oct 27, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Codeless Slider Templates slider-templates allows Server Side Request Forgery.This issue affects Slider Templates: from n/a throCheck if you run itEPSS 0.15%Oct 27, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in FanBridge FanBridge signup fanbridge-signup allows Stored XSS.This issue affects FanBridge signup: from n/a through <= 0.6.Check if you run itEPSS 0.11%Oct 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in raychat Raychat raychat allows Cross Site Request Forgery.This issue affects Raychat: from n/a through <= 2.2.1.Check if you run itEPSS 0.14%Oct 27, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Andrea Landonio CloudSearch cloud-search allows Stored XSS.This issue affects CloudSearch: from n/a through <= 3.0.0.Check if you run itEPSS 0.14%Oct 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Clifton Griffin Simple Content Templates for Blog Posts & Pages simple-post-template allows Cross Site Request Forgery.This issueCheck if you run itEPSS 0.14%Oct 27, 2025
- Low2.7GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated usCheck if you run itEPSS 0.32%Oct 27, 2025
- Medium4.3The FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) plugin for WordPress is vulnerable to Cross-Site Request FoCheck if you run itEPSS 0.14%Oct 25, 2025
- Medium4.3The Advanced Database Cleaner plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.6.Check if you run itEPSS 0.23%Oct 25, 2025
Sort