Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when inflating a request body.Check if you run itEPSS 0.55%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() A race can occur between the MCQ completion path and the abCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registCheck if you run itEPSS 0.22%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration Resolve kernel panic while accessingCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from regisCheck if you run itEPSS 0.23%May 8, 2025
- Medium4.8smarsh telemessage Use of Hard-coded CredentialsPatch nowKEVEPSS 0.39%May 8, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 1.21%May 7, 2025
- Medium4.2Rack is a modular Ruby web server interface.Check if you run itEPSS 0.24%May 7, 2025
- High8.7When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in aCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.44%May 7, 2025
- High8.7When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.43%May 7, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6.Check if you run itEPSS 0.34%May 7, 2025
- High8.3A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges.Check if you run itEPSS 0.34%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theCheck if you run itEPSS 0.15%May 7, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Moloni Contribuinte Checkout contribuinte-checkout allows Stored XSS.This issue affects Contribuinte Checkout: from n/a through <Check if you run itEPSS 0.14%May 7, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Smaily Smaily for WP smaily-for-wp allows Cross Site Request Forgery.This issue affects Smaily for WP: from n/a through <= 3.1.7.Check if you run itEPSS 0.15%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Ability, Inc Web Accessibility with Max Access accessibility-toolbar allows Cross Site Request Forgery.This issue affects Web AccCheck if you run itEPSS 0.15%May 7, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Credova Financial Credova_Financial credova-financial allows Cross Site Request Forgery.This issue affects Credova_Financial: froCheck if you run itEPSS 0.15%May 7, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in qusupport LiveAgent liveagent allows Cross Site Request Forgery.This issue affects LiveAgent: from n/a through <= 4.4.7.Check if you run itEPSS 0.15%May 7, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in ThimPress WP Pipes allows Server Side Request Forgery.Check if you run itEPSS 0.22%May 7, 2025
Sort