Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept deviceCheck if you run itEPSS 0.20%Apr 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in wpweb WooCommerce Social Login woo-social-login allows Cross Site Request Forgery.This issue affects WooCommerce Social Login: frCheck if you run itEPSS 0.18%Apr 16, 2025
- Medium5.3A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts.Check if you run itEPSS 0.53%Apr 16, 2025
- Medium6.5Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat.Check if you run itEPSS 0.66%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path If a shared IRQ is used byCheck if you run itEPSS 0.19%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path If a shared IRQ is used byCheck if you run itEPSS 0.19%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.Check if you run itEPSS 0.21%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix kernel panic during FW release This fixes a kernel panic seen during release FW in a sCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix array bounds error with may_goto may_goto uses an additional 8 bytes on the stack, which causes the intCheck if you run itEPSS 0.24%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_endpoint is called multiCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk driver depends on for deciding if the requesCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() If requested_clk > 128, cdns_mrvl_xCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dst_release Upstream fix ac888d58869b ("net: do not delay dst_entries_add()Check if you run itEPSS 0.21%Apr 16, 2025
- High7.1ZDI-26-702: Linux Kernel usbnet Driver Race Condition Privilege Escalation VulnerabilityCheck if you run itEPSS 0.20%Apr 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request.Check this weekEPSS 69.51%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion When BIOS neglects to assign bus numbers to PCCheck if you run itEPSS 0.25%Apr 16, 2025
- Medium5.1A vulnerability was found in mirweiye Seven Bears Library CMS 2023.Check if you run itEPSS 0.60%Apr 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Yuya Hoshino Bulk Term Editor bulk-term-editor allows Cross Site Request Forgery.This issue affects Bulk Term Editor: from n/a thCheck if you run itEPSS 0.19%Apr 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in WP Map Plugins Basic Interactive World Map basic-interactive-world-map allows Cross Site Request Forgery.This issue affects BasicCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in dsky Site Search 360 site-search-360 allows Stored XSS.This issue affects Site Search 360: from n/a through <= 2.1.8.Check if you run itEPSS 0.19%Apr 16, 2025
- High7.4Cross-Site Request Forgery (CSRF) vulnerability in sminozzi WP Tools wptools allows Path Traversal.This issue affects WP Tools: from n/a through <= 5.18.Check if you run itEPSS 0.26%Apr 16, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Toast Plugins Internal Link Optimiser internal-link-finder allows Stored XSS.This issue affects Internal Link Optimiser: from n/aCheck if you run itEPSS 0.19%Apr 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Cross Site Request Forgery.This issue affects ElementsReCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in A WP Life Right Click Disable OR Ban right-click-disable-or-ban allows Stored XSS.This issue affects Right Click Disable OR Ban:Check if you run itEPSS 0.19%Apr 16, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue afCheck if you run itEPSS 0.26%Apr 16, 2025
Sort