Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls The xchk_xfile_*_descr macros call kasprintf, which ca…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating two btrees The free space and inode btree repair f…Check if you run itEPSS 0.15%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an…Check if you run itEPSS 0.23%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail to allocate…Check if you run itEPSS 0.32%Mar 18, 2026
- High8.8The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.…Check if you run itEPSS 0.47%Mar 18, 2026
- High7.2The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.24%Mar 18, 2026
- High7.3The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2.Check if you run itEPSS 0.45%Mar 18, 2026
- Medium5.3The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all versions up to, and incl…Check if you run itEPSS 0.23%Mar 18, 2026
- High8.1MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack.Check if you run itEPSS 0.13%Mar 18, 2026
- High7.1The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF.Check if you run itEPSS 0.11%Mar 18, 2026
- High8.8The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF.Check if you run itEPSS 0.13%Mar 18, 2026
- Medium6.5MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to…Check if you run itEPSS 0.17%Mar 18, 2026
- High8.0MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to esc…Check if you run itEPSS 0.13%Mar 18, 2026
- High8.8The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack.Check if you run itEPSS 0.17%Mar 18, 2026
- Medium5.3A race condition in the secrets management subsystem of Juju versions 3.0.0 through 3.6.18 allows an authenticated unit agent to claim ownership of a newly initialized secret.Check if you run itEPSS 0.24%Mar 18, 2026
- Critical9.0In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix refcount bug and potential UAF in perf_mmap Syzkaller reported a refcount_t: additio…Check if you run itEPSS 0.13%Mar 18, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvme_pr_read_keys() nvme_pr_read_keys() takes num_keys from userspac…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium5.3beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality.Check if you run itEPSS 0.30%Mar 18, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.Check if you run itEPSS 0.53%Mar 18, 2026
- High8.6A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted…Check if you run itEPSS 0.54%Mar 18, 2026
- High7.1A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized P…Check if you run itEPSS 0.18%Mar 18, 2026
- High7.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry con…Check if you run itEPSS 0.26%Mar 18, 2026
- Medium5.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input.Check if you run itEPSS 0.38%Mar 18, 2026
Sort