Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode() rtw8822b_set_antenna() can be calle…Check if you run itEPSS 0.12%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/tests: shmem: Hold reservation lock around purge Acquire and release the GEM object's reservati…Check if you run itEPSS 0.12%May 8, 2026
- High7.8thermal: core: Fix thermal zone device registration error pathCheck if you run itEPSS 0.16%May 8, 2026
- High8.6Lack of proper authorization implementation in the CashDro 3 web administration panel, version 24.01.00.26.Check if you run itEPSS 0.31%May 8, 2026
- Critical9.1Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants.Check if you run itEPSS 0.50%May 8, 2026
- High8.8Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor.Check if you run itEPSS 0.73%May 8, 2026
- Medium5.3Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the platform are ab…Check if you run itEPSS 0.43%May 8, 2026
- High8.1Missing MinIO policy cleanup on bucket deletion via Apache CloudStack allows users to retain access to buckets which they previously owned.Check if you run itEPSS 0.37%May 8, 2026
- High8.1The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0.Check if you run itEPSS 0.51%May 8, 2026
- Medium6.5The CloudStack Backup plugin has an improper access logic in versions 4.21.0.0 and 4.22.0.0.Check if you run itEPSS 0.53%May 8, 2026
- Medium6.5The CloudStack Backup plugin has an improper authorization logic in versions 4.21.0.0 and 4.22.0.0.Check if you run itEPSS 0.49%May 8, 2026
- Critical9.2DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attacke…Check if you run itEPSS 1.43%May 8, 2026
- Critical9.8OS command injection in Dashboard Server interface in Universal Robots PolyScope versions prior to 5.25.1 allows unauthenticated attacker to craft commands that will e…Check if you run itEPSS 2.85%May 8, 2026
- Critical9.3Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication.Check if you run itEPSS 0.32%May 8, 2026
- Medium5.3Open redirection vulnerability in the latest demo version of the Cradle eCommerce platform.Check if you run itEPSS 0.34%May 8, 2026
- Medium6.4The E2Pdf – Export Pdf Tool for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the shortcode in all versions up…Check if you run itEPSS 0.24%May 8, 2026
- Medium6.4The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom post type in all versions up to, and including, 3.3.2.Check if you run itEPSS 0.24%May 8, 2026
- Critical10.0A vulnerability in Remote Spark SparkView before build 1122 allows an attacker to bypasses the local connection check and achieve arbitrary code execution as root on t…Check if you run itEPSS 0.33%May 8, 2026
- Medium6.4The NMR Strava activities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.0.14 due…Check if you run itEPSS 0.27%May 8, 2026
- High7.2The Auto Affiliate Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 6.8.8 This is due to insufficient input sa…Check if you run itEPSS 0.38%May 8, 2026
- High8.8The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Deserialization of Untrus…Check if you run itEPSS 0.95%May 8, 2026
- Medium5.3In uriparser before 1.0.2, the function family EqualsUri can misclassify two unequal URIs as equal.Check if you run itEPSS 0.21%May 8, 2026
- Medium5.3In uriparser before 1.0.2, there is pointer difference truncation to int in various places.Check if you run itEPSS 0.21%May 8, 2026
- Critical9.1Apache::Session versions through 1.94 for Perl re-creates deleted sessions.Check if you run itEPSS 0.36%May 8, 2026
- Medium5.1A vulnerability in Legion of the Bouncy Castle Inc.Check if you run itEPSS 0.16%May 8, 2026
Sort