Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infol…Check if you run itEPSS 0.22%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio dri…Check if you run itEPSS 0.18%Dec 6, 2025
- Low2.1A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0.Open the advisoryDec 5, 2025
- Low2.1A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0.Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: openvswitch: remove never-working support for setting nsh fields The validation of the set(nsh…Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure Patch series "mm/damon/sysfs: fix commit test d…Open the advisoryDec 4, 2025
- High7.3MCP Gateway allows easy and secure running and deployment of MCP servers.Open the advisoryDec 3, 2025
- Critical9.8dynamiapps frontend_admin Missing AuthorizationPatch nowKEVEPSS 2.19%Dec 3, 2025
- High8.8vLLM is an inference and serving engine for large language models (LLMs).Open the advisoryDec 1, 2025
- High8.4The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.Open the advisoryDec 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: arm64: sme: Use STR P to clear FFR context field in streaming SVE mode The FFR is a predicate regis…Check if you run itEPSS 0.15%Oct 22, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase page table level The AMD IOMMU host page table im…Check if you run itEPSS 0.11%Oct 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: clean up potential nfsd_file refcount leaks in COPY codepath There are two different flavors…Check if you run itEPSS 0.28%Oct 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Do not reset dql stats on NON_FATAL err All ibmvnic resets, make a call to netdev_tx_reset…Check if you run itEPSS 0.36%Oct 1, 2025
- UnknownXWiki xwiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 93.48%Sep 25, 2025
- Critical9.3WatchGuard Firebox Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 91.80%Sep 17, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: # cd /sys/ke…Check if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRM_MSG_ALLOCSPI Ne…Open the advisorySep 12, 2025
- Low2.1A flaw has been found in uverif up to 3.2.Open the advisorySep 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another pro…Open the advisorySep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are potentially only valid with…Check if you run itEPSS 0.17%Sep 4, 2025
- Low2.1A vulnerability has been found in Koillection up to 1.6.18.Open the advisoryAug 31, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: __dump_stack lib…Open the advisoryAug 30, 2025
- Medium5.4The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to…Open the advisoryAug 28, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soflyy WP Dynamic Links wp-dynamic-links allows Reflected XSS.This issue affecCheck this weekEPSS 24.00%Aug 14, 2025