Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: wusb3801: fix fwnode refcount leak in wusb3801_probe() I got the following report while doing faultCheck if you run itEPSS 0.27%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() failsCheck if you run itEPSS 0.27%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() dmc620_pmu_init() won't remove the callback addeCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set ubuf->sg = NULL if the creation of sg table fails When userspace tries to map the dmabuf and if forCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix running_req for internal abort commands Disabling the remote phy for a SATA disk causes a hangCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skb_clone() syzbot got a crash [1] in skb_clone(), caused by a bug in hsrCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report [1] with no reproducer hints at a bug in ip6_gre tCheck if you run itEPSS 0.25%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcb_probe() When probe hook function failed in mcb_probe(), it doesn't put thCheck if you run itEPSS 0.28%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, meta buffers could be leaked.Check if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing put_device in mport_cdev_open When kfifo_alloc fails, the refcount of chdev->dev iCheck if you run itEPSS 0.28%Dec 30, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2_lock() argv needs to be free when setup_async_work fails or when the curCheck if you run itEPSS 0.39%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, butCheck if you run itEPSS 0.18%Dec 30, 2025
- Medium4.3Insertion of Sensitive Information Into Sent Data vulnerability in Renzo Johnson contact-form-7-mailchimp-extension contact-form-7-mailchimp-extension allows Retrieve Embedded SensCheck if you run itEPSS 0.26%Dec 30, 2025
- Critical9.8JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and eaCheck if you run itEPSS 1.06%Dec 30, 2025
- High7.5Missing Authorization vulnerability in Imran Tauqeer CubeWP cubewp-framework allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CubeWP: from n/a thrCheck if you run itEPSS 0.28%Dec 29, 2025
- Medium6.3Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.Check if you run itEPSS 0.45%Dec 29, 2025
- High7.5phpmyfaq phpmyfaq Exposure of Sensitive Information Through Data QueriesPatch nowKEVEPSS 2.14%Dec 29, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codeaffairs Wp Text Slider Widget wp-text-slider-widget allows Stored XSS.ThisCheck if you run itEPSS 0.16%Dec 29, 2025
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 85.66%Dec 28, 2025
- Medium6.9A vulnerability was detected in ZKTeco BioTime up to 9.0.3/9.0.4/9.5.2.Check if you run itEPSS 0.29%Dec 28, 2025
- Medium6.5SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter.Check if you run itEPSS 0.28%Dec 26, 2025
- Medium5.3A vulnerability was determined in YunaiV yudao-cloud up to 2025.11.Check if you run itEPSS 0.30%Dec 26, 2025
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Verisay Communication and Information Technology Industry and Trade LtdCheck if you run itEPSS 0.31%Dec 25, 2025
- UnknownHeap-buffer-overflow in mmcallOpen the advisoryDec 25, 2025
- High7.1VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers to access arbitrary system files through unvalidated 'Check if you run itEPSS 0.65%Dec 24, 2025
Sort