Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In __iodyn_find_io_region(), pcmcia_make_resoCheck if you run itEPSS 0.16%Sep 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Define ARCH_PAGE_TABLE_SYNC_MASK andCheck if you run itEPSS 0.16%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm: move page table sync declarations to linux/pgtable.h During our internal testing, we started observing interCheck if you run itEPSS 0.15%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock recursion.Check if you run itEPSS 0.12%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2_delete_osb(), ocfs2_journal_shuCheck if you run itEPSS 0.17%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer dereference bug here.Check if you run itEPSS 0.16%Sep 19, 2025
- Medium6.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saysis Computer Systems Trade Ltd.Check if you run itEPSS 0.25%Sep 19, 2025
- Medium5.5A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831.Check if you run itEPSS 0.40%Sep 19, 2025
- Medium6.4Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc.Check if you run itEPSS 0.13%Sep 19, 2025
- Medium5.3A vulnerability has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831.Check if you run itEPSS 0.44%Sep 19, 2025
- Medium5.3A flaw has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831.Check if you run itEPSS 0.44%Sep 19, 2025
- High8.1The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'handle_mofirebase_form_options' fCheck if you run itEPSS 0.38%Sep 19, 2025
- Low2.1A weakness has been identified in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.41%Sep 19, 2025
- Medium6.9A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0.Check if you run itEPSS 0.97%Sep 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC -Check if you run itEPSS 0.26%Sep 19, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Beyaz Computer CityPlus allows Path Traversal.Check if you run itEPSS 0.46%Sep 19, 2025
- Medium5.3Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to accessCheck if you run itEPSS 0.28%Sep 19, 2025
- Medium4.3Grafana is an open-source platform for monitoring and observability.Check if you run itEPSS 0.36%Sep 19, 2025
- Medium6.8Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric Corporation MELSEC-Q Series Q03UDVCPU, Q04UDVCPU, Q06UDVCPU, Q13UDVCPU, Q26UDVCPU, Q04UDPVCCheck if you run itEPSS 1.02%Sep 19, 2025
- High8.8The Embed PDF for WPForms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_handler_download_pdf_media function in all veCheck if you run itEPSS 0.88%Sep 19, 2025
- High7.3The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.Check if you run itEPSS 0.22%Sep 19, 2025
- High8.6The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.Check if you run itEPSS 0.20%Sep 19, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry and Trade Ltd.Check if you run itEPSS 0.23%Sep 19, 2025
- Critical9.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.Check if you run itEPSS 0.42%Sep 19, 2025
- High7.1A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT).Check if you run itEPSS 0.21%Sep 19, 2025
Sort