Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: 9p/trans_fd: always use O_NONBLOCK read/write syzbot is reporting hung task at p9_fd_close() [1], for p9_mux_polCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP driver tracks perout anCheck if you run itEPSS 0.19%May 1, 2025
- Medium5.7APM server logs could contain parts of the document body from a partially failed bulk index request.Check if you run itEPSS 0.26%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ublk: fix handling recovery & reissue in ublk_abort_queue() Commit 8284066946e6 ("ublk: grab request reference wCheck if you run itEPSS 0.19%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_pci_remove() Kmemleak reported this error: unreferenced object 0xffff1c1Check if you run itEPSS 0.16%May 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinity_hint In stmmac_request_irq_multi_msi(), a pointer to the stack varCheck if you run itEPSS 0.21%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a lock on kvm->srcu when useCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error After devm_request_irq() faCheck if you run itEPSS 0.22%May 1, 2025
- Medium5.5The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_WebCheck if you run itEPSS 0.25%May 1, 2025
- Medium4.3The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerabCheck if you run itEPSS 0.20%May 1, 2025
- High8.8The NewsBlogger theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.5.4.Check if you run itEPSS 0.39%May 1, 2025
- Medium6.5Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable telnet access to the router's OS by sendiCheck if you run itEPSS 7.52%May 1, 2025
- Medium6.5Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable 'ate' (a remote system management binary)Check if you run itEPSS 0.41%May 1, 2025
- High8.8Lack of input validation/sanitization in the 'setLanCfg' API endpoint in httpd in the Tenda RX2 Pro 16.03.30.14 allows a remote attacker that is authorized to the web management poCheck if you run itEPSS 0.85%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetNetCheckTools function via the hostName parameter.Check if you run itEPSS 1.18%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the level parameter.Check if you run itEPSS 1.17%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter.Check if you run itEPSS 1.17%May 1, 2025
- Medium6.3Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the module parameter.Check if you run itEPSS 1.17%May 1, 2025
- Medium6.5TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter.Check if you run itEPSS 0.87%May 1, 2025
- Medium6.3TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.5TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Port parameter.Check if you run itEPSS 0.87%May 1, 2025
- Medium6.3TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.Check if you run itEPSS 0.94%May 1, 2025
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
Sort