Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1information disclosure while invoking calibration data from user space to update firmware size.Check if you run itEPSS 0.09%Sep 24, 2025
- High8.2Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set.Check if you run itEPSS 0.27%Sep 24, 2025
- High8.2Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.Check if you run itEPSS 0.26%Sep 24, 2025
- High8.2Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet.Check if you run itEPSS 0.26%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue.Check if you run itEPSS 0.24%Sep 24, 2025
- Low3.3NVIDIA CUDA Toolkit contains a vulnerability in cuobjdump, where an unprivileged user can cause a NULL pointer dereference.Check if you run itEPSS 0.16%Sep 24, 2025
- Medium4.2NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvJPEG where a local authenticated user may cause a GPU out-of-bounds write by providing certain image dimensions.Check if you run itEPSS 0.14%Sep 24, 2025
- Medium6.4The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 7.6.9 due to insufficient input sCheck if you run itEPSS 0.33%Sep 24, 2025
- Critical9.8The MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due tCheck if you run itEPSS 0.37%Sep 24, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event Currently, in ath12k_service_ready_ext_event(),Check if you run itEPSS 0.15%Sep 24, 2025
- Medium5.3The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critCheck if you run itEPSS 0.38%Sep 24, 2025
- Critical9.8The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it.Check if you run itEPSS 0.49%Sep 24, 2025
- Medium4.3Observable Timing Discrepancy vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.24%Sep 24, 2025
- High7.8Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.Check if you run itEPSS 0.16%Sep 24, 2025
- High7.8Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.Check if you run itEPSS 0.30%Sep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
- None0.0Not usedOpen the advisorySep 24, 2025
Sort