Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1KUNBUS PiCtory version 2.11.1 and earlier are vulnerable to a cross-site-scripting attack via the sso_token used for authentication.Check this weekEPSS 19.87%May 1, 2025
- High8.5KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints.Check this weekEPSS 19.45%May 1, 2025
- Critical9.3KUNBUS PiCtory versions 2.5.0 through 2.11.1 have an authentication bypass vulnerability where a remote attacker can bypass authentication to get access due to a path traversal.Check this weekEPSS 28.73%May 1, 2025
- Critical9.3KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server.Check if you run itEPSS 0.77%May 1, 2025
- High8.6MicroDicom DICOM Viewer is vulnerable to an out-of-bounds read which may allow an attacker to cause memory corruption within the application.Check if you run itEPSS 0.46%May 1, 2025
- Medium6.3Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured user configured in a PCheck if you run itEPSS 0.33%May 1, 2025
- High8.6MicroDicom DICOM Viewer is vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code.Check if you run itEPSS 0.58%May 1, 2025
- High7.7Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.Check if you run itEPSS 0.49%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources.Check if you run itEPSS 0.16%May 1, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Correctly move list in sc_disable() Commit 13bac861952a ("IB/hfi1: Fix abba locking issue with sc_disabCheck if you run itEPSS 0.24%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix NULL pointer problem in free_mr_init() Lock grab occurs in a concurrent scenario, resulting in steCheck if you run itEPSS 0.16%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix mr leak in RESPST_ERR_RNR rxe_recheck_mr() will increase mr's ref_cnt, so we should call rxe_put(mCheck if you run itEPSS 0.16%May 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed There is a null-ptr-deref when xps sysfs alloc failed: BUCheck if you run itEPSS 0.36%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfs4: Fix kmemleak when allocate slot failed If one of the slot allocate failed, should cleanup all the other alCheck if you run itEPSS 0.20%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: Fix possible memory leaks in dsa_loop_init() kmemleak reported memory leaks in dsa_loop_init(): kmemleCheck if you run itEPSS 0.19%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix null-ptr-deref in ib_core_cleanup() KASAN reported a null-ptr-deref error: KASAN: null-ptr-derefCheck if you run itEPSS 0.20%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfc: fdp: Fix potential memory leak in fdp_nci_send() fdp_nci_send() will call fdp_nci_i2c_write that will not fCheck if you run itEPSS 0.19%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() nxp_nci_send() will call nxp_nci_i2c_write(), and onlyCheck if you run itEPSS 0.19%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() nfcmrvl_i2c_nci_send() will be called by nfcmrCheck if you run itEPSS 0.19%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: Fix use after free in red_enqueue() We can't use "skb" again after passing it to qdisc_enqueue().Check if you run itEPSS 0.19%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: netlink notifier might race to release objects commit release path is invoked via call_rcuCheck if you run itEPSS 0.15%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flow rule object from commit path No need to postpone this to the commit release pCheck if you run itEPSS 0.16%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in __ip_vs_cleanup_batch() During the initialization of ip_vs_conn_net_init(), if file ip_vs_cCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ipvs: fix WARNING in ip_vs_app_net_cleanup() During the initialization of ip_vs_app_net_init(), if file ip_vs_apCheck if you run itEPSS 0.21%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rose_send_frame() The syzkaller reported an issue: KASAN: null-ptr-deref iCheck if you run itEPSS 0.19%May 1, 2025
Sort