Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Proliz Software Ltd.Check if you run itEPSS 0.21%Dec 17, 2025
- Medium6.6SonicWall SMA1000 Missing Authorization VulnerabilityPatch nowKEVEPSS 2.76%Dec 17, 2025
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- Unknownninjaforms ninja_forms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.44%Dec 17, 2025
- Critical9.3ASUS Live Update Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.20%Dec 16, 2025
- Medium4.8Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links.Check if you run itEPSS 0.32%Dec 16, 2025
- Critical9.3PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts without authorization through the configuration endpoint.Check if you run itEPSS 0.67%Dec 16, 2025
- Medium5.1PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in the episode upload form.Check if you run itEPSS 0.57%Dec 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page aCheck if you run itEPSS 0.44%Dec 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The following warning was seen when we try to connect using ssh to the dCheck if you run itEPSS 0.41%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same conteCheck if you run itEPSS 0.14%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to tCheck if you run itEPSS 0.17%Dec 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure last_fence is always updated Update last_fence in the vm-bind path instead of kernel managedCheck if you run itEPSS 0.13%Dec 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants oCheck if you run itEPSS 0.14%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump Do not block PCI config accesses through pciCheck if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers The and functions contain logic to zero-leCheck if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs The driver lacks the cleanup of faiCheck if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface When performing reset tests and enCheck if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: afs: Fix delayed allocation of a cell's anonymous key The allocation of a cell's anonymous key is done in a backCheck if you run itEPSS 0.26%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref In btusb_mtk_setup(), we set to: usb_ifnCheck if you run itEPSS 0.18%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup Protect vga_switcheroo_client_fb_set() with consCheck if you run itEPSS 0.21%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifs_construct_tcon() When having a multiuser mount with domain= specified and uCheck if you run itEPSS 0.21%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fastclose().Check if you run itEPSS 0.22%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function whiCheck if you run itEPSS 0.21%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix memory leak in eem_unwrap The existing code did not handle the failure case of usb_ep_quCheck if you run itEPSS 0.21%Dec 16, 2025
Sort