Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources.Check this weekEPSS 16.00%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_register_device() Afer commit 1fa5ae857bb1 ("driver core: get rid of stCheck this weekEPSS 20.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ftrace ops [1].Check this weekEPSS 22.00%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mISDN: fix possible memory leak in mISDN_dsp_element_register() Afer commit 1fa5ae857bb1 ("driver core: get ridCheck this weekEPSS 20.00%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: rethook: fix a potential memleak in rethook_alloc() In rethook_alloc(), the variable rh is not freed or passed oCheck this weekEPSS 17.00%May 1, 2025
- High7.8NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions.Check this weekEPSS 22.00%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources.Check this weekEPSS 15.00%May 1, 2025
- High8.1Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.39%Apr 30, 2025
- Medium6.5vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 0.52%Apr 30, 2025
- High7.7An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responsesCheck this weekEPSS 21.00%Apr 25, 2025
- Low2.4Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain desCheck this weekEPSS 21.00%Apr 25, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Buddle Send From send-from allows Stored XSS.This issue affects SendCheck if you run itEPSS 0.27%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Shamim Hasan Custom Functions Plugin custom-functions allows Stored XSS.This issue affects Custom Functions Plugin: from n/a throCheck if you run itEPSS 0.14%Apr 24, 2025
- High8.0ManageWiki is a MediaWiki extension allowing users to manage wikis.Check if you run itEPSS 0.67%Apr 21, 2025
- Medium4.3An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.42%Apr 21, 2025
- Medium6.5Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs).Check if you run itEPSS 0.46%Apr 18, 2025
- High7.1A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionaCheck if you run itEPSS 1.29%Apr 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Excellent Dynamics Make Email Customizer for WooCommerce make-email-customizerCheck if you run itEPSS 0.29%Apr 17, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in algol.plus Advanced Dynamic Pricing for WooCommerce advanced-dynamic-pricing-for-woocommerce allows Cross Site Request Forgery.ThCheck if you run itEPSS 0.17%Apr 17, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nawawi Jamili Docket Cache docket-cache allows PHP Local FiCheck if you run itEPSS 0.70%Apr 17, 2025
- Medium4.9The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1.Check if you run itEPSS 0.53%Apr 17, 2025
- High7.2The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and including, 1.2.9.1.Check if you run itEPSS 1.02%Apr 17, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When calling netlbl_conn_setattr(), addr-Check this weekEPSS 30.00%Apr 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a warning in to_nfit_bus_uuid(): "oCheck this weekEPSS 22.00%Apr 16, 2025
- Medium5.4Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DynamCheck if you run itEPSS 0.45%Apr 16, 2025