Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 93.84%Feb 10, 2025
- High7.5vitest.dev vitest Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.40%Feb 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: always recalculate features after XDP clearing, fix null-deref Recalculate features when…Check if you run itEPSS 0.23%Jan 31, 2025
- High8.8Zyxel DSL CPE OS Command Injection VulnerabilityPatch nowKEVEPSS 20.70%Jan 28, 2025
- UnknownSolarWinds dameware_mini_remote_control Origin Validation ErrorPatch nowKEVEPSS 5.18%Jan 28, 2025
- UnknownWordPress Oshine Modules Plugin Server Side Request Forgery (SSRF)Patch nowKEVEPSS 0.26%Jan 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix max SGEs for the Work Request Gen P7 supports up to 13 SGEs for now.Check if you run itEPSS 0.40%Jan 21, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue The TQP BAR space is div…Check if you run itEPSS 0.21%Jan 19, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityPatch nowKEVEPSS 96.83%Jan 15, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.35%Jan 14, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs The driver, through the SAS t…Check if you run itEPSS 0.21%Jan 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dlm: fix possible lkb_resource null dereference This patch fixes a possible null pointer dereferenc…Check if you run itEPSS 0.24%Jan 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched: fix warning in sched_setaffinity Commit 8f9ea86fdf99b added some logic to sched_setaffinity…Check if you run itEPSS 0.22%Jan 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt tCheck if you run itEPSS 0.55%Jan 8, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Hold module reference while requesting a module User space may unload ip_set.ko w…Check if you run itEPSS 0.18%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: virtiofs: use pages instead of pointer for kernel direct IO When trying to insert a 10MB kernel mod…Check if you run itEPSS 0.22%Dec 27, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove freed bfqq fr…Check if you run itEPSS 0.26%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method…Check if you run itEPSS 0.42%Dec 17, 2024
- Unknownmimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.31%Dec 16, 2024
- High7.4A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.Check if you run itEPSS 0.83%Dec 12, 2024
- UnknownHunk Companion Plugin Unauthenticated POST Request VulnerabilityPatch nowKEVEPSS 59.05%Dec 10, 2024
- UnknownApache OFBiz Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 93.23%Dec 5, 2024
- UnknownOpenAPI Generator outputFolder VulnerabilityPatch nowKEVEPSS 3.59%Dec 5, 2024
- Unknownphonepe phonepe Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 37.67%Dec 5, 2024
- Unknownwavlink wl-wn531p3_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.52%Dec 5, 2024
Sort