Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3HedgeDoc is an open source, real-time, collaborative, markdown notes application.Check if you run itEPSS 0.10%Dec 5, 2025
- High7.2The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…Open the advisoryDec 4, 2025
- Medium6.1The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and i…Open the advisoryDec 2, 2025
- Medium4.4In GPU pdma, there is a possible information disclosure due to a missing bounds check.Open the advisoryDec 2, 2025
- Medium4.4In GPU pdma, there is a possible memory corruption due to a missing permission check.Open the advisoryDec 2, 2025
- High7.8In display, there is a possible out of bounds read due to a missing bounds check.Open the advisoryDec 2, 2025
- High7.8In mmdvfs, there is a possible out of bounds write due to a missing bounds check.Open the advisoryDec 2, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().Check if you run itEPSS 0.58%Nov 12, 2025
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.03%Nov 12, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpat…Check if you run itEPSS 0.18%Oct 28, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB access in IP checksum code for negative lengths Although commit c2c24edb1d9c (…Check if you run itEPSS 0.15%Oct 22, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix skb_copy_ubufs() vs BIG TCP David Ahern reported crashes in skb_copy_ubufs() caused by TCP…Check if you run itEPSS 0.15%Oct 7, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.39%Sep 17, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix race in sock_map_free() sock_map_free() calls release_sock(sk) without owning a r…Check if you run itEPSS 0.12%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE On Google gs101, the number of UTP transf…Open the advisorySep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry When UFFDIO_MOVE encounters a…Open the advisorySep 4, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin gn-xml-sitemap allows Stored XSS.This issue affects Google XML News Sitem…Open the advisoryAug 28, 2025
- Medium5.4The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to…Open the advisoryAug 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf().Check if you run itEPSS 0.17%Aug 22, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight Reject migration of SE…Check if you run itEPSS 0.18%Jul 25, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flush() syzbot reported use-after-free in vhci_flush() without rCheck if you run itEPSS 0.18%Jul 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it discovered a use-after-free vulnerability, [0Check if you run itEPSS 0.19%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: validate buffer count with offset for cloning syzbot reports that it can trigger a WARN_ON() forCheck this weekEPSS 15.00%Jul 4, 2025
- Medium5.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - GoogleDocs4MW Extension allows Cross-SCheck this weekEPSS 25.00%Jul 3, 2025