Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture.Check if you run itEPSS 0.46%Oct 1, 2025
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.60%Oct 1, 2025
- High7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.59%Oct 1, 2025
- Medium4.3Discourse is an open-source community discussion platform.Check if you run itEPSS 0.26%Oct 1, 2025
- High7.5In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attackeCheck if you run itEPSS 0.47%Oct 1, 2025
- Medium4.9In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role tCheck if you run itEPSS 0.56%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwidth_request() The memory allocated in tb_queue_dp_bandwidth_rCheck if you run itEPSS 0.13%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: powerpc/52xx: Fix a resource leak in an error handling path The error handling path of mpc52xx_lpbfifo_probe() hCheck if you run itEPSS 0.16%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix NULL-pointer dereferences There are several places where we can crash the kernel by requestinCheck if you run itEPSS 0.16%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring: wait interruptibly for request completions on exit WHen the ring exits, cleanup is done and the finalCheck if you run itEPSS 0.16%Oct 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensure the cached parent diCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path If request_irq() in i40e_vsi_request_irq_msix() faCheck if you run itEPSS 0.16%Oct 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging inCheck if you run itEPSS 0.16%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bsearch to look for the 'cCheck if you run itEPSS 0.15%Oct 1, 2025
- Medium4.0The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via tCheck if you run itEPSS 0.30%Oct 1, 2025
- High8.2In Frappe ERPNext 15.57.5, the function get_rfq_containing_supplier() at erpnext/buying/doctype/request_for_quotation/request_for_quotation.py is vulnerable to SQL Injection, whichCheck if you run itEPSS 0.33%Oct 1, 2025
- High8.2In Frappe ERPNext 15.57.5, the function get_material_requests_based_on_supplier() at erpnext/stock/doctype/material_request/material_request.py is vulnerable to SQL Injection, whicCheck if you run itEPSS 0.34%Oct 1, 2025
- High8.8A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request.Check if you run itEPSS 0.44%Oct 1, 2025
- Critical9.3The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that improperly handles user-supplied input.Check if you run itEPSS 1.21%Sep 30, 2025
- Medium5.3Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method.Check if you run itEPSS 0.27%Sep 30, 2025
- High8.8The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94.Check if you run itEPSS 0.22%Sep 30, 2025
- Medium6.1The LockerPress – WordPress Security Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.16%Sep 30, 2025
- Medium4.3The Chat by Chatwee plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.3.Check if you run itEPSS 0.16%Sep 30, 2025
- Medium6.4Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Question Mark button, the Help Button, the About button, and tCheck if you run itEPSS 0.13%Sep 30, 2025
- Medium5.4TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality.Check if you run itEPSS 0.33%Sep 30, 2025
Sort