Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.Check if you run itEPSS 1.18%Dec 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing header The driver expects to rCheck if you run itEPSS 0.19%Dec 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data The URB received in gs_usCheck if you run itEPSS 0.19%Dec 23, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP no_direct return section to fix race As explain in commit fa349e396e48 ("veth: Fix race with AFCheck if you run itEPSS 0.44%Dec 23, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: team: Move team device type change at the end of team_port_add Attempting to add a port device that is already uCheck if you run itEPSS 0.15%Dec 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: atm/fore200e: Fix possible data race in fore200e_open() Protect access to fore200e->available_cell_rate with ratCheck if you run itEPSS 0.19%Dec 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized ksz_irq If something goes wrong at setup, ksz_irq_free() can be caCheck if you run itEPSS 0.18%Dec 23, 2025
- Critical10.0eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.Check if you run itEPSS 0.31%Dec 23, 2025
- High8.8SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endpoint that allows remote attackers to reset device configuratCheck if you run itEPSS 0.98%Dec 22, 2025
- Critical9.3SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands through the 'passCheck if you run itEPSS 3.40%Dec 22, 2025
- High8.8SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote attackers to write arbitrary files through the 'upgfile' parametCheck if you run itEPSS 1.24%Dec 22, 2025
- Medium5.1SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without user consent.Check if you run itEPSS 0.19%Dec 22, 2025
- Critical9.3SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials.Check if you run itEPSS 0.74%Dec 22, 2025
- Critical9.3SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and access hidden system resources.Check if you run itEPSS 0.85%Dec 22, 2025
- Critical9.3Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters.Check if you run itEPSS 0.47%Dec 22, 2025
- High8.8D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request.Check if you run itEPSS 0.53%Dec 22, 2025
- Medium6.9Hasura GraphQL 1.3.3 contains a server-side request forgery vulnerability that allows attackers to inject arbitrary remote schema URLs through the add_remote_schema endpoint.Check if you run itEPSS 0.38%Dec 22, 2025
- Medium6.9Hasura GraphQL 1.3.3 contains a local file read vulnerability that allows attackers to access system files through SQL injection in the query endpoint.Check if you run itEPSS 0.22%Dec 22, 2025
- High8.7Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL queries with excessive nested fields.Check if you run itEPSS 0.48%Dec 22, 2025
- High7.5youlai-boot V2.21.1 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.44%Dec 22, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted There's issue when file systemCheck if you run itEPSS 0.55%Dec 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() Syzbot identified an issue [1] in pcl818_ai_cancel(), wCheck if you run itEPSS 0.19%Dec 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix possible deadlock in the deferred_irq_workfn() For PREEMPT_RT=y kernels, the deferred_irq_workfn(Check if you run itEPSS 0.11%Dec 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving controller data Fix the incorrect usage of platform_set_drvdata and dCheck if you run itEPSS 0.19%Dec 22, 2025
- High8.3Mattermost versions 11.1.x <= 11.1.0, 11.0.x <= 11.0.5, 10.12.x <= 10.12.3, 10.11.x <= 10.11.7 with the Jira plugin enabled and Mattermost Jira plugin versions <=4.4.0…Check if you run itEPSS 0.26%Dec 22, 2025
Sort