Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role.Check if you run itEPSS 0.50%May 3, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ice: copy last block omitted in ice_get_module_eeprom() ice_get_module_eeprom() is broken since commit e9c9692c8Check if you run itEPSS 0.22%May 2, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nvmet: avoid potential UAF in nvmet_req_complete() An nvme target ->queue_response() operation implementation maCheck if you run itEPSS 0.54%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: loop: Fix use-after-free issues do_req_filebacked() calls blk_mq_complete_request() synchronously or asynchronouCheck if you run itEPSS 0.21%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: rc: gpio-ir-recv: add remove function In case runtime PM is enabled, do runtime PM clean up to remove cpuCheck if you run itEPSS 0.20%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: interconnect: exynos: fix node leak in probe PM QoS error path Make sure to add the newly allocated interconnectCheck if you run itEPSS 0.20%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/i915/active: Fix misuse of non-idle barriers as fence trackers Users reported oopses on list corruptions wheCheck if you run itEPSS 0.22%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes [WHY] When PTEBufferSizeInRequests is zero, UCheck if you run itEPSS 0.21%May 2, 2025
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery.Check if you run itEPSS 0.20%May 2, 2025
- Medium6.5IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.25%May 2, 2025
- Medium5.3IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.51%May 2, 2025
- Medium4.4In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, aka XSS.Check if you run itEPSS 0.24%May 2, 2025
- Critical9.8Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formSetSambaConf function via the usbname parameter.Check if you run itEPSS 1.91%May 2, 2025
- Critical9.8Tenda AC9 V15.03.06.42_multi was found to contain a command injection vulnerability in the formsetUsbUnload function via the deviceName parameter.Check if you run itEPSS 1.91%May 2, 2025
- Critical9.8Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter.Check if you run itEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Files or Directories Accessible to External PartiesPatch nowKEVEPSS 2.66%May 2, 2025
- UnknownZKTeco BioTime Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.26%May 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rose: Fix NULL pointer dereference in rose_send_frame() The syzkaller reported an issue: KASAN: null-ptr-deref iCheck if you run itEPSS 0.19%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cxl/region: Fix decoder allocation crash When an intermediate port's decoders have been exhausted by existing reCheck if you run itEPSS 0.17%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix memory leak in query_regdb_file() In the function query_regdb_file() the alpha2 parameter isCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: riscv: fix reserved memory setup Currently, RISC-V sets up reserved memory using the "early" copy of the deviceCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix segmentation fault at module unload Move am65_cpsw_nuss_phylink_cleanup() callCheck if you run itEPSS 0.17%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring: fix multishot accept request leaks Having REQ_F_POLLED set doesn't guarantee that the request is execuCheck if you run itEPSS 0.17%May 1, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: scsi: zfcp: Fix double free of FSF request when qdio send fails We used to use the wrong type of integer in 'zfcCheck if you run itEPSS 0.20%May 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: 9p: trans_fd/p9_conn_cancel: drop client lock earlier syzbot reported a double-lock here and we no longer need tCheck if you run itEPSS 0.39%May 1, 2025
Sort