Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownairlink101 skyipcam1620w_wireless_n_mpeg4_3gpp_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 16.99%Oct 19, 2025
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 38.01%Oct 17, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to preve…Check if you run itEPSS 0.15%Oct 15, 2025
- Unknownjoomlaserviceprovider wsecure Improper Input ValidationPatch nowKEVEPSS 8.98%Oct 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err() reports deta…Check if you run itEPSS 0.16%Oct 1, 2025
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 1.05%Sep 26, 2025
- Medium5.3Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata.Open the advisorySep 22, 2025
- High8.8debug is a JavaScript debugging utility.Open the advisorySep 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() If we find an unexpected…Open the advisorySep 15, 2025
- Medium4.3Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to properly validate cache keys for link metadata…Open the advisorySep 15, 2025
- High8.5dstack is a software development kit (SDK) to simplify the deployment of arbitrary containerized apps into trusted execution environments.Open the advisorySep 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops Clears up the warning added in 7ee3647243e5 ("mig…Open the advisorySep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msm_ioctl_gem_info_set_metadata…Open the advisorySep 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] There is an internal report th…Check if you run itEPSS 0.18%Sep 11, 2025
- High7.2Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Open the advisorySep 9, 2025
- Critical9.8Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityPatch nowKEVEPSS 2.88%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we ne…Open the advisorySep 4, 2025
- Unknowncanonical ubuntu_linux Incorrect AuthorizationPatch nowKEVEPSS 9.05%Sep 3, 2025
- Low1.8Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Open the advisoryAug 29, 2025
- Low1.8Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Open the advisoryAug 29, 2025
- Medium5.3QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality.Open the advisoryAug 28, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 4.73%Aug 20, 2025
- Medium6.1The Add User Meta plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check this weekEPSS 16.00%Aug 15, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 15, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allowsCheck this weekEPSS 27.00%Aug 14, 2025