Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator BPF programs may call next() and destroy() oCheck if you run itEPSS 0.20%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap use uninterruptible lock After process exit to unmap csa and free GPU vm, if signal is accCheck if you run itEPSS 0.20%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking The current implementation uses bias_pad_enablCheck if you run itEPSS 0.19%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after commit 9dd05df840Check if you run itEPSS 0.21%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix race condition in unaccepted memory handling The page allocator tracks the number of zones thCheck if you run itEPSS 0.14%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogic_input_configured() devm_kasprintf() returns NULL when memory allocationCheck if you run itEPSS 0.20%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: mctp: Don't access ifa_index when missing In mctp_dump_addrinfo, ifa_index can be used to filter interfacesCheck if you run itEPSS 0.20%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Add missing locking Recent kernels complain about a missing lock in k3-udma.c when the lCheck if you run itEPSS 0.22%Jun 18, 2025
- Medium4.3Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Breeze: from n/a through <Check if you run itEPSS 0.27%Jun 18, 2025
- High7.2The CSV Me plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'csv_me_options_page' function in all versions up to, and inCheck if you run itEPSS 0.64%Jun 18, 2025
- Medium6.4The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 3.8.5 due to insuffiCheck if you run itEPSS 0.28%Jun 18, 2025
- UnknownFunnelKit funnelkit_automations Missing AuthorizationPatch nowKEVEPSS 3.35%Jun 18, 2025
- Unknownwisecleaner wise_force_deleter Improper Access ControlPatch nowKEVEPSS 0.51%Jun 18, 2025
- UnknownZemana Watchdog Anti-Malware amsdk.sys Kernel Mode Driver Arbitrary Code InjectionPatch nowKEVEPSS 0.56%Jun 18, 2025
- High7.7A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.Check if you run itEPSS 0.14%Jun 17, 2025
- Medium5.5A binary in the BoKS Server Agent component of Fortra's Core Privileged Access Manager (BoKS) on versions 7.2.0 (up to 7.2.0.17), 8.1.0 (up to 8.1.0.22), 8.1.1 (up to 8.1.1.7), 9.0Check if you run itEPSS 0.14%Jun 17, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 30.45%Jun 17, 2025
- High8.8Sitecore experience_commerce Relative Path TraversalPatch nowKEVEPSS 24.83%Jun 17, 2025
- High8.4An out-of-bounds write vulnerability exists within the parsing of PRJ files.Check if you run itEPSS 0.19%Jun 17, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- Critical9.8An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations.Check if you run itEPSS 2.06%Jun 17, 2025
- Critical9.8An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations.Check if you run itEPSS 1.42%Jun 17, 2025
- High7.5A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lCheck if you run itEPSS 1.95%Jun 17, 2025
- Medium4.3An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.Check if you run itEPSS 0.31%Jun 17, 2025
- High7.5A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations.Check if you run itEPSS 1.85%Jun 17, 2025
Sort