Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured.Open the advisoryNov 12, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.53%Nov 12, 2025
- High8.5A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).Open the advisoryNov 11, 2025
- Medium6.8A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0).Open the advisoryNov 11, 2025
- High8.7A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11).Open the advisoryNov 11, 2025
- UnknownImproper Privilege ManagementPatch nowKEVEPSS 9.61%Oct 31, 2025
- Unknownnootheme jobmonster Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.80%Oct 31, 2025
- Unknownseeyon zhiyuan_oa_web_application_system Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.49%Oct 30, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warning on the following s…Check if you run itEPSS 0.24%Oct 28, 2025
- Critical9.3Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel VulnerabilityPatch nowKEVEPSS 2.77%Oct 20, 2025
- Unknownchef automate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 24.32%Oct 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free The previous commit 0718a78f6a9f ("A…Check if you run itEPSS 0.21%Oct 15, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000_release The original code uses cancel_delayed_wo…Check if you run itEPSS 0.15%Oct 15, 2025
- Unknownnetatalk netatalk Stack-based Buffer OverflowPatch nowKEVEPSS 4.35%Oct 14, 2025
- UnknownApache Struts Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.21%Oct 13, 2025
- UnknownNETGEAR ac2100_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 2.23%Oct 9, 2025
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.56%Oct 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should be called…Check if you run itEPSS 0.15%Oct 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: improve error handling from ext4_dirhash() The ext4_dirhash() will *almost* never fail, espec…Check if you run itEPSS 0.16%Oct 1, 2025
- Medium5.3Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata.Open the advisorySep 22, 2025
- Medium5.3Missing Authorization vulnerability in memberful Memberful - Membership Plugin memberful-wp allows Accessing Functionality Not Properly Constrained by ACLs.This issue…Open the advisorySep 22, 2025
- Medium5.3Missing Authorization vulnerability in Heureka Group Heureka heureka allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Heureka: from n…Open the advisorySep 22, 2025
- Medium6.5Mattermost versions 10.5.x <= 10.5.8, 9.11.x <= 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitive files via b…Open the advisorySep 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Define ARCH_PAGE_TABLE_…Check if you run itEPSS 0.16%Sep 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains two sepa…Check if you run itEPSS 0.22%Sep 16, 2025