Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exceCheck if you run itEPSS 0.17%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown() isCheck if you run itEPSS 0.17%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULCheck if you run itEPSS 0.46%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcoCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patches to add a WARN() when replacingCheck if you run itEPSS 0.18%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vm_bind_ioctl double free bug If the argument check during an array bind fails, the bind_ops are freCheck if you run itEPSS 0.16%Sep 5, 2025
- High8.6On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attackeCheck if you run itEPSS 0.23%Sep 5, 2025
- High7.6Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unautCheck if you run itEPSS 0.16%Sep 5, 2025
- Medium6.0The sequence of packets received by a Networking server are not correctly checked.Check if you run itEPSS 0.27%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross Site Request Forgery.This issue affects Quick Paypal Payments:Check if you run itEPSS 0.13%Sep 5, 2025
- Medium6.5Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.23%Sep 5, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.59%Sep 5, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous miraculous allows Blind SQL Injection.This issue affecCheck if you run itEPSS 0.31%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gourl GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership gourl-bitcoiCheck if you run itEPSS 0.18%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ericzane Floating Window Music Player floating-window-music-player allows Stored XSS.This issue affects Floating Window Music PlaCheck if you run itEPSS 0.12%Sep 5, 2025
- High7.5Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-gateway-for-saferpay allows Path Traversal.This issue affectCheck if you run itEPSS 0.41%Sep 5, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vincent Boiardt Easy Flash Embed easy-flash-embed allows Stored XSS.This issueCheck if you run itEPSS 0.17%Sep 5, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Beaver Builder WordPress Assistant assistant allows Reflected XSS.This issue aCheck if you run itEPSS 0.19%Sep 5, 2025
- Critical9.8Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through <= 4.0.Check if you run itEPSS 0.44%Sep 5, 2025
- Medium6.5Missing Authorization vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.TCheck if you run itEPSS 0.23%Sep 5, 2025
- Medium5.5In App Widget, there is a possible Information Disclosure due to a confused deputy.Check if you run itEPSS 0.07%Sep 5, 2025
- Medium5.5In gralloc4, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.08%Sep 5, 2025
- Low3.3In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the coCheck if you run itEPSS 0.08%Sep 5, 2025
- Medium5.5In libxml2, there is a possible out of bounds read due to a buffer overflow.Check if you run itEPSS 0.08%Sep 5, 2025
- Medium5.5In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check.Check if you run itEPSS 0.07%Sep 5, 2025
Sort