Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition In the ssi_protCheck if you run itEPSS 0.25%Apr 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffers io_req_prep_async() can import provided buffers, commit thCheck if you run itEPSS 0.28%Apr 18, 2025
- Medium6.9A vulnerability classified as critical has been found in baseweb JSite 1.0.Check if you run itEPSS 0.75%Apr 18, 2025
- Medium5.1A vulnerability was found in baseweb JSite 1.0.Check if you run itEPSS 0.39%Apr 18, 2025
- Medium6.3Dify is an open-source LLM app development platform.Check if you run itEPSS 0.29%Apr 18, 2025
- Medium6.3IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate anotherCheck if you run itEPSS 0.31%Apr 18, 2025
- Medium6.3IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could aCheck if you run itEPSS 0.34%Apr 18, 2025
- Medium5.1A vulnerability was found in baseweb JSite 1.0.Check if you run itEPSS 0.39%Apr 18, 2025
- Medium5.1A vulnerability was found in PbootCMS 3.2.5.Check if you run itEPSS 0.47%Apr 18, 2025
- Medium6.4The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Table of Contents widget in all versions up to, and incluCheck if you run itEPSS 0.43%Apr 18, 2025
- High8.7A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical.Check if you run itEPSS 1.13%Apr 18, 2025
- Critical9.2ASUS asus_firmware Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.13%Apr 18, 2025
- High8.7A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical.Check this weekEPSS 12.79%Apr 18, 2025
- Medium5.4The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.3.12 due to insufficient input sCheck if you run itEPSS 0.37%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQ_NOWAIT raid10_handle_discard should wait barriCheck if you run itEPSS 0.28%Apr 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_read_int_time_ms The array contains only 5 elements, but theCheck if you run itEPSS 0.26%Apr 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() If speed_hz < AMD_SPI_MIN_HZ, amd_set_spCheck if you run itEPSS 0.23%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-from-user context Patch series "mm/hwpoison: Fix regressionsCheck if you run itEPSS 0.24%Apr 18, 2025
- High8.4In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() commit 419d1918105e ("ASoC: simCheck if you run itEPSS 0.26%Apr 18, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_names[] array only hasCheck if you run itEPSS 0.25%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_driver struct was still only using the old .name initializationCheck if you run itEPSS 0.24%Apr 18, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" label in ea_get(), the code checks if the eCheck if you run itEPSS 0.30%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init() With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due tCheck if you run itEPSS 0.28%Apr 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() The pynfs DELEG8 test fails when run agaCheck if you run itEPSS 0.62%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions In the current implementation, skbprio enqueue/dequeueCheck if you run itEPSS 0.33%Apr 18, 2025
Sort