Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs).Check if you run itEPSS 0.46%Apr 18, 2025
- Medium6.5Dify is an open-source LLM app development platform.Check if you run itEPSS 0.30%Apr 18, 2025
- Medium6.5Element X Android is a Matrix Android Client provided by element.io.Check this weekEPSS 36.00%Apr 18, 2025
- Medium6.3Dify is an open-source LLM app development platform.Check if you run itEPSS 0.29%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properlyCheck if you run itEPSS 0.27%Apr 18, 2025
- Critical9.8Insecure default settings have been found in recorder products provided by Yokogawa Electric Corporation.Check this weekEPSS 74.00%Apr 18, 2025
- Medium6.5Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP HeCheck this weekEPSS 30.00%Apr 17, 2025
- High7.5Missing Authorization vulnerability in The Right Software WooCommerce Loyal Customers woocommerce-loyal-customer allows Accessing Functionality Not Properly Constrained by ACLs.ThiCheck if you run itEPSS 0.45%Apr 17, 2025
- Medium5.8Missing Authorization vulnerability in jidaikobo Dashi dashi allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Dashi: from n/a through <= 3.1.8.Check if you run itEPSS 0.29%Apr 17, 2025
- Medium6.3A vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.2).Check if you run itEPSS 0.44%Apr 17, 2025
- High7.5DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS trafCheck this weekEPSS 19.00%Apr 16, 2025
- Medium6.8Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot sCheck this weekEPSS 44.00%Apr 16, 2025
- Medium6.8Overview The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot sCheck this weekEPSS 50.00%Apr 16, 2025
- Medium4.3Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which aCheck if you run itEPSS 0.29%Apr 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error It is possible that ctx in nfqnl_buiCheck this weekEPSS 38.00%Apr 16, 2025
- High8.6In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Mask the bd_cnt field in the TX BD properly The bd_cnt field in the TX BD specifies the total number ofCheck this weekEPSS 36.00%Apr 16, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() If track_pfn_copy() fails, we already addCheck this weekEPSS 21.00%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1_uart_probe() function calls w1_uart_serdev_open() (which includCheck this weekEPSS 20.00%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue() Fix the following kernel warning deleting HTBCheck this weekEPSS 23.00%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs Patch series "mm: fixes for device-exclusive entries (hmm)", v2.Check this weekEPSS 28.00%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference Address a kernel panic caused by a null poiCheck this weekEPSS 20.00%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: vimc: skip .s_stream() for stopped entities Syzbot reported [1] a warning prompted by a check in call_s_sCheck this weekEPSS 20.00%Apr 16, 2025
- Medium5.3Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Constrained by ACLs.ThiCheck if you run itEPSS 0.58%Apr 16, 2025
- Medium5.3Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue aCheck if you run itEPSS 0.58%Apr 16, 2025
- High7.5Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited TCheck this weekEPSS 46.00%Apr 15, 2025