Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() Since handle->h_transaction may be a NULCheck this weekEPSS 20.00%Jul 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount() to prevent crashes Validate db_agheight, db_agwidth, and db_agstart inCheck this weekEPSS 19.00%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sit_bitmap_size w/ below testcase, resize will generate a corrupted image whichCheck this weekEPSS 19.00%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: clear the dst when changing skb protocol A not-so-careful NAT46 BPF program can crash the kernel if it indiCheck if you run itEPSS 0.20%Jul 4, 2025
- High7.2The Download Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dpwap_plugin_locInstall function in all versions up to,Check if you run itEPSS 1.26%Jul 4, 2025
- Critical10.0An unauthenticated command injection vulnerability exists in stamparm/maltrail (Maltrail) versions <=0.54.Check if you run itEPSS 5.47%Jul 2, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 39.68%Jul 2, 2025
- High7.5@cyanheads/git-mcp-server is an MCP server designed to interact with Git repositories.Check this weekEPSS 24.54%Jul 1, 2025
- Critical9.0A cloud infrastructure misconfiguration in OneLogin AD Connector results in log data being sent to a hardcoded S3 bucket (onelogin-adc-logs-production) without validating bucket owCheck this weekEPSS 53.00%Jul 1, 2025
- Medium4.3Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly validate channel membership when retrieving playbookCheck this weekEPSS 20.00%Jun 30, 2025
- Medium6.0iOS Simulator MCP Server (ios-simulator-mcp) is a Model Context Protocol (MCP) server for interacting with iOS simulators.Check this weekEPSS 64.00%Jun 26, 2025
- Critical9.8The Simple User Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.Check if you run itEPSS 2.59%Jun 26, 2025
- Unknown5vtechnologies blue_angel_software_suite Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 11.30%Jun 23, 2025
- Medium4.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Retrieve ECheck this weekEPSS 25.00%Jun 20, 2025
- Critical9.4Edimax ew-7438rpn_mini_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.81%Jun 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: xfrm: policy: fix metadata dst->dev xmit null pointer dereference When we try to transmit an skb with metadata_dCheck this weekEPSS 25.00%Jun 18, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Server Side Request Forgery.This issue affects ProCheck this weekEPSS 17.00%Jun 17, 2025
- High8.2Conda-build contains commands and tools to build conda packages.Check this weekEPSS 83.00%Jun 16, 2025
- Medium6.4The Slider, Gallery, and Carousel by MetaSlider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘aria-label’ parameter in all versions up to, and includinCheck if you run itEPSS 0.26%Jun 14, 2025
- High8.8The CubeWP – All-in-One Dynamic Content Framework plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.23.Check if you run itEPSS 0.53%Jun 11, 2025
- Medium4.7In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs.Check if you run itEPSS 0.67%Jun 10, 2025
- Medium5.3A vulnerability was found in Metabase 54.10.Check if you run itEPSS 0.63%Jun 9, 2025
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in metalpriceapi MetalpriceAPI metalpriceapi allows Code Injection.This issue affects MetalpriceAPI: from n/Check if you run itEPSS 0.43%Jun 9, 2025
- Critical10.0WilderForge is a Wildermyth coremodding API.Check if you run itEPSS 0.79%Jun 9, 2025
- Medium5.7The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copyiCheck this weekEPSS 21.00%Jun 9, 2025