Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Server-Side Request Forgery (SSRF) in the Remote Browser Plugin in Sonatype Nexus Repository 2.x up to and including 2.15.2 allows unauthenticated remote attackers to exfiltrate prCheck if you run itEPSS 0.50%Oct 8, 2025
- High8.7A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506.Check if you run itEPSS 1.04%Oct 8, 2025
- Medium5.3A security flaw has been discovered in JhumanJ OpnForm up to 1.9.3.Check if you run itEPSS 0.29%Oct 8, 2025
- Medium5.3The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9.Check if you run itEPSS 0.41%Oct 8, 2025
- Critical9.3A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1.Check if you run itEPSS 6.71%Oct 8, 2025
- High8.0Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharCheck if you run itEPSS 5.83%Oct 8, 2025
- UnknownAMD Radeon Graphics Driver IOCTL Request VulnerabilityPatch nowKEVEPSS 0.46%Oct 8, 2025
- High7.1A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set.Check if you run itEPSS 0.25%Oct 7, 2025
- High7.6LLaMA-Factory is a tuning library for large language models.Check if you run itEPSS 0.38%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/handshake: fix null-ptr-deref in handshake_nl_done_doit() We should not call trace_handshake_cmd_done_err()Check if you run itEPSS 0.13%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix missing mbhc init error handling MBHC initialisation can fail so add the missing erroCheck if you run itEPSS 0.14%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-mq: avoid double ->queue_rq() because of early timeout David Jeffery found one double ->queue_rq() issue, soCheck if you run itEPSS 0.20%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-mq: use quiesced elevator switch when reinitializing queues The hctx's run_work may be racing with the elevaCheck if you run itEPSS 0.21%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() This patch fixes a shift-out-of-boCheck if you run itEPSS 0.22%Oct 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix size validation for non-exclusive domains (v4) Fix amdgpu_bo_validate_size() to check whether thCheck if you run itEPSS 0.15%Oct 7, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.93%Oct 7, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.56%Oct 7, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.93%Oct 7, 2025
- High8.8Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Check if you run itEPSS 0.77%Oct 7, 2025
- High8.8Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Check if you run itEPSS 0.73%Oct 7, 2025
- High8.8Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Check if you run itEPSS 0.73%Oct 7, 2025
- High8.8Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Check if you run itEPSS 0.77%Oct 7, 2025
- High8.8A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Check if you run itEPSS 6.94%Oct 7, 2025
- Medium5.3A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58.Check if you run itEPSS 0.46%Oct 7, 2025
- High7.2A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters.Check if you run itEPSS 0.41%Oct 7, 2025
Sort