Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The WP Dashboard Chat plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the useCheck if you run itEPSS 0.30%Oct 15, 2025
- Medium5.3The YourMembership Single Sign On – YM SSO Login plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'moym_display_test_attriCheck if you run itEPSS 0.30%Oct 15, 2025
- High8.8The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.2.3.Check if you run itEPSS 0.35%Oct 15, 2025
- High7.2The DocoDoco Store Locator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, aCheck if you run itEPSS 0.69%Oct 15, 2025
- Medium6.4The WP BookWidgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bw_link' shortcode in all versions up to, and including, 0.9 due to insufficiCheck if you run itEPSS 0.30%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() There is a bug observed when rtw89_core_tx_Check if you run itEPSS 0.27%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix blk_mq_tags double free while nr_requests grown In the case user trigger tags grow by queue sysfs atCheck if you run itEPSS 0.20%Oct 15, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: scsi: target: target_core_configfs: Add length check to avoid buffer overflow A buffer overflow arises from theCheck if you run itEPSS 0.17%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free The previous commit 0718a78f6a9f ("ALSA: usb-audiCheck if you run itEPSS 0.21%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove The original code uses cancel_deCheck if you run itEPSS 0.23%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state->timer is a cyclic timerCheck if you run itEPSS 0.23%Oct 15, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000_release The original code uses cancel_delayed_work() in xc500Check if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free inCheck if you run itEPSS 0.16%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while trCheck if you run itEPSS 0.20%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remCheck if you run itEPSS 0.20%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_helper_proto kernel test robot reported verifier bug [1] where thCheck if you run itEPSS 0.19%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass theCheck if you run itEPSS 0.18%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CANCheck if you run itEPSS 0.18%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CCheck if you run itEPSS 0.17%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CACheck if you run itEPSS 0.18%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in sCheck if you run itEPSS 0.20%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue This fixes the following UAF caused by not properly lockingCheck if you run itEPSS 0.25%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_syCheck if you run itEPSS 0.28%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed wCheck if you run itEPSS 0.15%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is in a group The kernel forbids the creation of non-FDB nexthopCheck if you run itEPSS 0.23%Oct 15, 2025
Sort