Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could aCheck if you run itEPSS 0.34%Apr 18, 2025
- Medium5.1A vulnerability was found in baseweb JSite 1.0.Check if you run itEPSS 0.39%Apr 18, 2025
- Medium5.1A vulnerability was found in PbootCMS 3.2.5.Check if you run itEPSS 0.47%Apr 18, 2025
- Medium6.4The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Table of Contents widget in all versions up to, and incluCheck if you run itEPSS 0.43%Apr 18, 2025
- High8.7A vulnerability was found in Tenda AC15 up to 15.03.05.19 and classified as critical.Check if you run itEPSS 1.13%Apr 18, 2025
- Critical9.2ASUS asus_firmware Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.13%Apr 18, 2025
- High8.7A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical.Check this weekEPSS 12.79%Apr 18, 2025
- Medium5.4The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.3.12 due to insufficient input sCheck if you run itEPSS 0.37%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQ_NOWAIT raid10_handle_discard should wait barriCheck if you run itEPSS 0.28%Apr 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075_read_int_time_ms The array contains only 5 elements, but theCheck if you run itEPSS 0.26%Apr 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() If speed_hz < AMD_SPI_MIN_HZ, amd_set_spCheck if you run itEPSS 0.23%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-from-user context Patch series "mm/hwpoison: Fix regressionsCheck if you run itEPSS 0.24%Apr 18, 2025
- High8.4In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() commit 419d1918105e ("ASoC: simCheck if you run itEPSS 0.26%Apr 18, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() The csts_state_names[] array only hasCheck if you run itEPSS 0.25%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_driver struct was still only using the old .name initializationCheck if you run itEPSS 0.24%Apr 18, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds read in ea_get() During the "size_check" label in ea_get(), the code checks if the eCheck if you run itEPSS 0.30%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix UBSAN panic in samsung_clk_init() With UBSAN_ARRAY_BOUNDS=y, I'm hitting the below panic due tCheck if you run itEPSS 0.28%Apr 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() The pynfs DELEG8 test fails when run agaCheck if you run itEPSS 0.62%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net_sched: skbprio: Remove overly strict queue assertions In the current implementation, skbprio enqueue/dequeueCheck if you run itEPSS 0.33%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properlyCheck if you run itEPSS 0.27%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remove path Add fsl_edma->txirq/errirq check to avoid below warning bCheck if you run itEPSS 0.28%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr The function mtk_dp_wait_hpd_asserted() may bCheck if you run itEPSS 0.26%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Clear table_sz when rproc_shutdown There is case as below could trigger kernel dump: Use U-BooCheck if you run itEPSS 0.27%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV RLCG RegisCheck if you run itEPSS 0.18%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors Commit 6eac36bb9eb0 ("x86/resctrl:Check if you run itEPSS 0.26%Apr 18, 2025
Sort