Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one()…Open the advisorySep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly…Open the advisorySep 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix memory corruption when FW resources change during ifdown bnxt_set_dflt_rings() assumes…Open the advisorySep 16, 2025
- Medium6.1Mattermost versions 10.5.x <= 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to malicious sites via crafted OAuth login URLsOpen the advisorySep 15, 2025
- Medium4.3Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to properly validate cache keys for link metadata…Open the advisorySep 15, 2025
- Medium6.5Mattermost versions 10.10.x <= 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remo…Open the advisorySep 15, 2025
- High7.3Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command.Open the advisorySep 12, 2025
- Medium5.7Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command.Open the advisorySep 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dm: dm-crypt: Do not partially accept write BIOs with zoned targets Read and write operations issue…Check if you run itEPSS 0.13%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages Ever since commit c2ff29e99a76 ("siw: Inl…Open the advisorySep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_open is set to a ver…Check if you run itEPSS 0.18%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockup warning was observed on a r…Open the advisorySep 11, 2025
- Unknownw3eden download_manager Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.88%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix refcount leak causing resource not released When ksmbd_conn_releasing(opinfo->conn) retu…Open the advisorySep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated…Open the advisorySep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512_status() Problem ------- With CONFIG_X86_DEBUG_FPU enabled,…Open the advisorySep 4, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The event_seq_changed() ha…Open the advisorySep 4, 2025
- High7.3CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows…Open the advisoryAug 29, 2025
- Medium5.3Missing Authorization vulnerability in inkthemes WP Mailgun SMTP wp-mailgun-smtp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP…Open the advisoryAug 28, 2025
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.74%Aug 22, 2025
- UnknownMicrosoft Windows Incorrect Resource Transfer Between SpheresPatch nowKEVEPSS 16.37%Aug 20, 2025
- Medium6.2AIDE is an advanced intrusion detection environment.Check this weekEPSS 25.00%Aug 14, 2025
- Critical10.0Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality.Check if you run itEPSS 5.81%Aug 13, 2025
- Critical10.0Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts.Check if you run itEPSS 2.76%Aug 13, 2025
- High8.7S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler.Check if you run itEPSS 1.92%Aug 13, 2025