Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue aCheck if you run itEPSS 0.58%Apr 16, 2025
- High7.5Missing Authorization vulnerability in NotFound Unlimited Timeline unlimited-timeline allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Unlimited TCheck this weekEPSS 46.00%Apr 15, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetMenu jet-menu allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetMenu: from n/a through <= 2Check this weekEPSS 46.00%Apr 15, 2025
- Critical9.3Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.55%Apr 15, 2025
- Medium4.9In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server.Check this weekEPSS 23.00%Apr 15, 2025
- Medium5.2Netskope Client on Mac OS is impacted by a vulnerability in which the postinstall script does not properly validate the path of the file “nsinstallation”.Check this weekEPSS 15.00%Apr 15, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetBlog jet-blog allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlog: from n/a through <= 2Check this weekEPSS 37.00%Apr 15, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetPopup jet-popup allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetPopup: from n/a through <Check this weekEPSS 37.00%Apr 15, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetTricks jet-tricks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetTricks: from n/a througCheck this weekEPSS 37.00%Apr 15, 2025
- Critical9.1A replay attack vulnerability was discovered in a Zigbee smart home kit manufactured by Ksix (Zigbee Gateway Module = v1.0.3, Door Sensor = v1.0.7, Motion Sensor = v1.0.12), whereCheck this weekEPSS 87.00%Apr 15, 2025
- Unknownst._joe_erp_system_project st._joe_erp_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.11%Apr 14, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting named_triggers list The following commands causes a crash: ~#…Check if you run itEPSS 0.21%Apr 1, 2025
- Unknownsfwebservice injob Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.50%Mar 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Fix ida_free call while not allocated In the rproc_alloc() function, on error, pu…Check if you run itEPSS 0.18%Mar 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Remove dangling pointers When an async control is written, we copy a pointer to th…Check if you run itEPSS 0.26%Feb 27, 2025
- Unknownbuffalo wsr-2533dhpl2-bk_firmware Improper AuthenticationPatch nowKEVEPSS 8.17%Feb 25, 2025
- Medium5.4A flaw was found in npm-serialize-javascript.Check if you run itEPSS 1.12%Feb 10, 2025
- Unknownpayplus payplus_payment_gateway Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.13%Jan 22, 2025
- UnknownUnverified Password ChangePatch nowKEVEPSS 1.44%Jan 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix receive ring space parameters when XDP is active The MTU setting at the time an XDP mu…Check if you run itEPSS 0.63%Dec 27, 2024
- High7.8vfio/pci: Properly hide first-in-list PCIe extended capabilityCheck if you run itEPSS 0.26%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to that in Commi…Check if you run itEPSS 0.62%Nov 19, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2_IOCTL request When using encryption, either enforced by th…Check if you run itEPSS 0.28%Nov 7, 2024
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: lantiq_etop: fix memory disclosure When applying padding, the buffer is not zeroed,…Check if you run itEPSS 1.06%Oct 21, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of new_ea in ea_buffer syzbot reports that lzo1x_1_do_compress is usin…Check if you run itEPSS 0.28%Oct 21, 2024