Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 settings parameter SETTINGS_MAX_HEADER_LIST_SIZE.Check if you run itEPSS 0.78%May 8, 2025
- High8.4Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitraCheck if you run itEPSS 0.30%May 8, 2025
- Medium4.4Dell PowerScale OneFS, versions 9.8.0.0 through 9.10.1.0, contain a time-of-check time-of-use (TOCTOU) race condition vulnerability.Check if you run itEPSS 0.16%May 8, 2025
- Medium5.5Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.1.0, contains an out-of-bounds write vulnerability.Check if you run itEPSS 0.22%May 8, 2025
- High7.2In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body.Check if you run itEPSS 0.55%May 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 8, 2025
- Medium5.9Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicitCheck if you run itEPSS 0.76%May 8, 2025
- High8.7apollotheme ap_pagebuilder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.68%May 8, 2025
- Medium6.3Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and <Checkmk 2.4.0b6 allows attacker to access files that coulCheck if you run itEPSS 0.32%May 8, 2025
- Medium6.1The tagDiv Composer plugin for WordPress, used by the Newspaper theme, is vulnerable to Reflected Cross-Site Scripting via the ‘data’ parameter in all versions up to, and includingCheck if you run itEPSS 0.33%May 8, 2025
- Medium6.3The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to Limited Code Execution in all versions up to, and including, 8.9.1 via theCheck if you run itEPSS 0.36%May 8, 2025
- Medium6.4Contest Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 26.0.6 due to insufficient input saniCheck if you run itEPSS 0.29%May 8, 2025
- Medium6.4The NEX-Forms – Ultimate Form Builder – Contact forms and much more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the clean_html and form_fields parametersCheck if you run itEPSS 0.22%May 8, 2025
- High8.7Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.26%May 8, 2025
- High8.7WF2220 exposes endpoint /cgi-bin-igd/netcore_get.cgi that returns configuration of the device to unauthorized users.Check if you run itEPSS 0.23%May 8, 2025
- High8.2Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.95%May 8, 2025
- High7.7Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.Check if you run itEPSS 0.25%May 8, 2025
- Medium6.9Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow VariaCheck if you run itEPSS 0.18%May 8, 2025
- Medium6.9Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.Check if you run itEPSS 0.16%May 8, 2025
- High7.1Improper Input Validation, the returnUrl parameter in Account Security Settings lacks proper input validation, allowing attackers to redirect users to malicious websites (Open RediCheck if you run itEPSS 0.36%May 8, 2025
- Medium6.4The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Price Range’ parameter in all versions up to, and including, 2.7.11 dueCheck if you run itEPSS 0.28%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memory failure forCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads Fix niu_try_msix() to not cause a fatal trCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL wheCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the targCheck if you run itEPSS 0.19%May 8, 2025
Sort