Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker withCheck if you run itEPSS 0.18%Oct 9, 2025
- High7.1An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management (CFM) daemon and the Connectivity Fault Management Manager (cfmman) of Juniper Networks JunoCheck if you run itEPSS 0.48%Oct 9, 2025
- High8.5A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legiCheck if you run itEPSS 0.27%Oct 9, 2025
- High7.1Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows authenticated attackers to define the storage location of reportCheck if you run itEPSS 0.71%Oct 9, 2025
- High8.8Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation.Check if you run itEPSS 0.27%Oct 9, 2025
- Low1.0Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be incluCheck if you run itEPSS 0.19%Oct 9, 2025
- Medium4.9IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly validated API input due to excessive resource consumption.Check if you run itEPSS 0.32%Oct 9, 2025
- Medium4.3IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user due to an observable discrepancy of returned data.Check if you run itEPSS 0.24%Oct 9, 2025
- Medium5.3IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted.Check if you run itEPSS 0.22%Oct 9, 2025
- High8.8A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems.Check if you run itEPSS 0.82%Oct 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring: fix incorrect io_kiocb reference in io_link_skb In io_link_skb function, there is a bug where prev_notCheck if you run itEPSS 0.16%Oct 9, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix untrusted unsigned subtract Fix the following Smatch static checker warning: net/rxrpc/rxgk_app.c:65Check if you run itEPSS 0.25%Oct 9, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level The AMD IOMMU host page table implementationCheck if you run itEPSS 0.12%Oct 9, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpi_gpio_info struct Since commit 7c010d463372 ("gpiolib: acpi: Make sure we fill strCheck if you run itEPSS 0.16%Oct 9, 2025
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or sCheck if you run itEPSS 0.53%Oct 9, 2025
- High7.7GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certain conditions, could have allowed authenticated users with rCheck if you run itEPSS 0.38%Oct 9, 2025
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, and 18.4 prior to 18.4.2 that could have allowed an authenticaCheck if you run itEPSS 0.54%Oct 9, 2025
- Medium6.4The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_title’ parameter in all versions up to, and including, 28.1.6 due to insufficient input sCheck if you run itEPSS 0.20%Oct 9, 2025
- Medium6.5The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on several functions in all versions up tCheck if you run itEPSS 0.39%Oct 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix incorrect retrival of acp_chip_info Use dev_get_drvdata(dev->parent) instead of dev_get_platCheck if you run itEPSS 0.13%Oct 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was surprise removed When a PCI device is removed with surpriseCheck if you run itEPSS 0.19%Oct 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: increase scan_ies_len for S1G Currently the S1G capability element is not taken into account forCheck if you run itEPSS 0.16%Oct 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igc_probe() on LED setup error When igc_led_setup() fails, igc_probe() fails and triggers kernelCheck if you run itEPSS 0.17%Oct 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().Check if you run itEPSS 0.17%Oct 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: mp: Fix dual-divider clock rate readback When dual-divider clock support was introduced, the P diCheck if you run itEPSS 0.13%Oct 9, 2025
Sort