Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr If multiple connection re…Check if you run itEPSS 0.39%Apr 1, 2025
- High7.5A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding.Check if you run itEPSS 0.56%Mar 31, 2025
- UnknownCisco meraki_mx64_firmware Failure to Handle Missing ParameterPatch nowKEVEPSS 1.14%Mar 31, 2025
- Unknownvercel next.js Improper AuthorizationPatch nowKEVEPSS 99.22%Mar 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added t…Check if you run itEPSS 0.24%Mar 27, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityPatch nowKEVEPSS 87.94%Mar 25, 2025
- Unknownperfsonar perfsonar Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 4.45%Mar 17, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tomoyo: don't emit warning in tomoyo_write_control() syzbot is reporting too large allocation warni…Check if you run itEPSS 0.21%Mar 6, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the de…Check if you run itEPSS 0.21%Mar 6, 2025
- Critical9.3Edimax IC-7100 IP Camera OS Command Injection VulnerabilityPatch nowKEVEPSS 74.48%Mar 4, 2025
- Critical9.8usememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.93%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported following splat [1] Make sure user-…Check if you run itEPSS 0.27%Feb 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF for _do_seri…Check if you run itEPSS 0.24%Feb 27, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: ipmr: do not call mr_mfc_uses_dev() for unres entries syzbot found that calling mr_mfc_uses_dev() f…Check if you run itEPSS 0.21%Feb 27, 2025
- Unknowndahuasecurity dvr Improper AuthenticationPatch nowKEVEPSS 69.68%Feb 27, 2025
- High7.5A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made.Check if you run itEPSS 0.82%Feb 26, 2025
- High7.8ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commitCheck if you run itEPSS 0.28%Feb 26, 2025
- UnknownNextChat NextChat Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.17%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.29%Feb 25, 2025
- UnknownFortinet FortiSIEM Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 80.30%Feb 25, 2025
- UnknownVMware Spring Framework Unintended Proxy or Intermediary ('Confused Deputy')Patch nowKEVEPSS 10.21%Feb 25, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.86%Feb 20, 2025
- High8.3A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope.Check if you run itEPSS 0.82%Feb 13, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
Sort