Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameCheck if you run itEPSS 0.18%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add error handling for old state CRTC in atomic_disable Introduce error handling to address an issCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: macb: fix unregister_netdev call order in macb_remove() When removing a macb device, the driver calls phy_eCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploitation of Trusted Identifiers.Check if you run itEPSS 0.36%Sep 16, 2025
- Medium6.5Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if uCheck if you run itEPSS 0.25%Sep 16, 2025
- High7.5Information disclosure, mitigation bypass in the Privacy component in Firefox for Android.Check if you run itEPSS 0.31%Sep 16, 2025
- High8.1Spoofing issue in the Site Permissions component.Check if you run itEPSS 0.35%Sep 16, 2025
- Medium5.4Mitigation bypass in the Web Compatibility: Tooling component.Check if you run itEPSS 0.27%Sep 16, 2025
- High8.8Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142.Check if you run itEPSS 0.34%Sep 16, 2025
- Medium6.5Spoofing issue in the WebAuthn component in Firefox for Android.Check if you run itEPSS 0.29%Sep 16, 2025
- Medium6.2Information disclosure in the Networking: Cache component.Check if you run itEPSS 0.16%Sep 16, 2025
- Medium6.5Incorrect boundary conditions in the JavaScript: GC component.Check if you run itEPSS 0.33%Sep 16, 2025
- Medium6.5Same-origin policy bypass in the Layout component.Check if you run itEPSS 0.32%Sep 16, 2025
- High7.3Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component.Check if you run itEPSS 0.37%Sep 16, 2025
- High7.1Sandbox escape due to use-after-free in the Graphics: Canvas2D component.Check if you run itEPSS 0.29%Sep 16, 2025
- High8.8Integer overflow in the SVG component.Check if you run itEPSS 0.78%Sep 16, 2025
- Medium6.3A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL/TLS communication is configured.Check if you run itEPSS 0.33%Sep 16, 2025
- Critical9.3A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.Check if you run itEPSS 0.16%Sep 16, 2025
- Critical9.3A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent.Check if you run itEPSS 0.18%Sep 16, 2025
- Medium6.9The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is validated only after the SSL/TLS handshake is completed, exposesCheck if you run itEPSS 0.39%Sep 16, 2025
- Critical9.5If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlieCheck if you run itEPSS 0.29%Sep 16, 2025
- High7.6Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configured to use the non-default Blowfish cryptography algorithm uCheck if you run itEPSS 0.22%Sep 16, 2025
- Medium5.1This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) parameters at its web management portal.Check if you run itEPSS 0.49%Sep 16, 2025
- Medium5.7Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions as welCheck if you run itEPSS 0.13%Sep 16, 2025
- Medium5.7Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documented.Check if you run itEPSS 0.14%Sep 16, 2025
Sort