Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.5An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions when using an empty or deCheck if you run itEPSS 0.35%Sep 16, 2025
- Critical9.6Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalation.Check if you run itEPSS 0.16%Sep 16, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot allows SQL Injection.Check if you run itEPSS 0.35%Sep 16, 2025
- Medium5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dolusoft Omaspot allows Reflected XSS.Check if you run itEPSS 0.25%Sep 16, 2025
- High8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communication System Azora Wireless Network Management allows SQL InjeCheck if you run itEPSS 0.18%Sep 16, 2025
- Medium4.3The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blaze_demo_importer_install_plugin' funcCheck if you run itEPSS 0.24%Sep 16, 2025
- High7.5The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded genericsCheck if you run itEPSS 0.48%Sep 16, 2025
- High7.5The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics.Check if you run itEPSS 0.45%Sep 16, 2025
- High8.8The Sparkle framework includes a helper tool Autoupdate.Check if you run itEPSS 0.20%Sep 16, 2025
- Medium4.8The Sparkle framework includes an XPC service Downloader.xpc, by default this service is private to the application its bundled with.Check if you run itEPSS 0.17%Sep 16, 2025
- Medium5.7There is an unauthorized access vulnerability in ZTE T5400.Check if you run itEPSS 0.27%Sep 16, 2025
- Low3.5There is an an information disclosure vulnerability in ZTE T5400.Check if you run itEPSS 0.24%Sep 16, 2025
- Low2.3The extension "Form to Database" is susceptible to Cross-Site Scripting.Check if you run itEPSS 0.33%Sep 16, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection.Check if you run itEPSS 0.44%Sep 16, 2025
- Medium4.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ubit Information Technologies STOYS allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.22%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix possible memory leak for vcap_dup_rule() Inject fault When select CONFIG_VCAP_KUNICheck if you run itEPSS 0.13%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: iwl4965: Add missing check for create_singlethread_workqueue() Add the check for the return value of the cCheck if you run itEPSS 0.15%Sep 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We should return when io->bio is null before doing anything.Check if you run itEPSS 0.15%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: hi846: Fix memleak in hi846_init_controls() hi846_init_controls doesn't clean the allocated ctrl_hdlr inCheck if you run itEPSS 0.15%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for bCheck if you run itEPSS 0.15%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of se_io context in nfc_genl_se_io The callback context for sending/receiving APDUs to/fromCheck if you run itEPSS 0.15%Sep 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_gCheck if you run itEPSS 0.22%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after wait_for_sndbuf This patch fixes a corner case where the asoc out stream coCheck if you run itEPSS 0.15%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens onlCheck if you run itEPSS 0.15%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() Syzbot reported a null-ptr-deref bug: ntfs3: loop0:Check if you run itEPSS 0.15%Sep 16, 2025
Sort