Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue [1] that crashes…Check if you run itEPSS 0.20%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup In fastrpc_map_lookup, dma_buf_get is…Check if you run itEPSS 0.19%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: nilfs2: avoid having an active sc_timer before freeing sci Because kthread_stop did not stop sc_tas…Check if you run itEPSS 0.18%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access before closing files opened by open_exec() bm_register_write() op…Check if you run itEPSS 0.20%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer was being der…Check if you run itEPSS 0.19%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mm/mempool: fix poisoning order>0 pages with HIGHMEM The kernel test has reported: BUG: unable to h…Check if you run itEPSS 0.19%Dec 16, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between t…Check if you run itEPSS 0.13%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction manager The transaction manager initialization in t…Check if you run itEPSS 0.15%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in AH output Fix field-spanning memcpy warnings in ah6…Check if you run itEPSS 0.21%Dec 16, 2025
- High7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.20%Dec 11, 2025
- High7.8An issue was discovered in Foxit PDF and Editor for Windows before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.15%Dec 11, 2025
- High8.5squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments.Check if you run itEPSS 0.36%Dec 11, 2025
- High7.5Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenti…Check if you run itEPSS 0.56%Dec 10, 2025
- Critical9.3Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active Directory (LDAP) login method.Check if you run itEPSS 0.57%Dec 10, 2025
- Medium6.3An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determined Object Attributes, has been identified in…Check if you run itEPSS 0.46%Dec 10, 2025
- Critical9.8The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2.Check if you run itEPSS 0.48%Dec 10, 2025
- Critical9.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.51%Dec 10, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.Check if you run itEPSS 0.49%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Id parameter of /Mobile/ContactDetails.aspx.Open the advisoryDec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldCc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Open the advisoryDec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.Check if you run itEPSS 0.40%Dec 9, 2025