Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium4.8A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (UnifCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does nCheck if you run itEPSS 0.37%Oct 1, 2025
- High7.5In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attackeCheck if you run itEPSS 0.47%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, a low-privileged user that does noCheck if you run itEPSS 0.37%Oct 1, 2025
- Medium4.9In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role tCheck if you run itEPSS 0.56%Oct 1, 2025
- Medium6.5In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.111, 9.3.2408.119, and 9.2.2406.122, a low-privileged user that doesCheck if you run itEPSS 0.45%Oct 1, 2025
- Medium4.6In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does noCheck if you run itEPSS 0.31%Oct 1, 2025
- Low1.9IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user.Check if you run itEPSS 0.12%Oct 1, 2025
- Medium4.7Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of TeamViewer Remote and Tensor — allows an attacker with local,Check if you run itEPSS 0.14%Oct 1, 2025
- Medium4.8Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'numero_conferencia' parCheck if you run itEPSS 0.31%Oct 1, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/iCheck if you run itEPSS 0.30%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware resources Currently, in ath11k_ahb_fw_resources_init(), iommu domCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() The following call trace was observed: lCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix memory leak in rtw88_usb Kmemleak shows the following leak arising from routine in the usb probCheck if you run itEPSS 0.13%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fully succeed it is possible for qp cleanup codCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() The memory allocated in tb_queue_dp_bandwidth_rCheck if you run itEPSS 0.13%Oct 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jbd2: check 'jh->b_transaction' before removing it from checkpoint Following process will corrupt ext4 image: StCheck if you run itEPSS 0.16%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only As for multicast: - The SIDR is the only mode that makes senseCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer overflow occurs in the iwl_write_tCheck if you run itEPSS 0.17%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization If the gs_usb device driver is unloaded (or unbound) before tCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is reporting circular locking dependency betweCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() A fix for: BUG: KASAN: slab-out-of-bounds in ses_intf_remCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifierCheck if you run itEPSS 0.12%Oct 1, 2025
Sort