Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file patCheck if you run itEPSS 1.65%May 9, 2025
- Medium5.9The EUCookieLaw plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.7.2 via the 'file_get_contents' function.Check if you run itEPSS 0.77%May 9, 2025
- Medium6.5Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.Check if you run itEPSS 2.12%May 9, 2025
- Critical9.8The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.1.6 due to accepting a uCheck if you run itEPSS 2.28%May 9, 2025
- Medium4.3The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to aCheck if you run itEPSS 0.63%May 9, 2025
- Medium4.8A vulnerability was found in code-projects Departmental Store Management System 1.0.Check if you run itEPSS 0.53%May 9, 2025
- Medium4.8A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0.Check if you run itEPSS 0.40%May 9, 2025
- Medium4.8A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.65%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as control value This reverts commit 9bdd10d57a88 ("ASoC: ops: ShiftCheck if you run itEPSS 0.28%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_get_flow_namespace() reCheck if you run itEPSS 0.28%May 9, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result If the FW doesn't support the PDS_CORE_CMD_FW_CONTROCheck if you run itEPSS 0.29%May 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make the wait_context a full part of the q_info struct rather than aCheck if you run itEPSS 0.30%May 9, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route isn't postable Restore an IRTE back to host control (remappeCheck if you run itEPSS 0.32%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcu_tasks_trace and event_mutex.Check if you run itEPSS 0.21%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for get_zeroed_page() Add check for the return value of get_zeroed_page() in sclp_console_iCheck if you run itEPSS 0.29%May 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueuCheck if you run itEPSS 0.30%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() The variable d->name, returned by devm_kaspriCheck if you run itEPSS 0.31%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: um: work around sched_yield not yielding in time-travel mode sched_yield by a userspace may not actually cause sCheck if you run itEPSS 0.18%May 9, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() and p9_client_read_once(Check if you run itEPSS 0.72%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init Move the get_ctx(child_ctx) call and the child_eCheck if you run itEPSS 0.28%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommu_device_register() encounters an error, it can end up tearing downCheck if you run itEPSS 0.28%May 9, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS When testing a special config: CONFIG_NETFS_SUPPORTS=y CONCheck if you run itEPSS 0.26%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing to clear the PTM status 'valid' bit while the PTM cycle is triggered reCheck if you run itEPSS 0.29%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbe_probe() error path When ngbe_sw_init() is called, memory is allocated for wx-Check if you run itEPSS 0.32%May 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running butCheck if you run itEPSS 0.28%May 9, 2025
Sort