Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownchef automate Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 24.32%Oct 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __m…Check if you run itEPSS 0.31%Sep 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] There is an internal report th…Check if you run itEPSS 0.18%Sep 11, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race between DIM disable and net_dim() There's a race between disabling DIM and NAPI…Check if you run itEPSS 0.13%Jul 25, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job times out, we check if the GPU has mCheck if you run itEPSS 0.19%May 20, 2025
- High7.5In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of theCheck this weekEPSS 25.09%May 14, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix PM related deadlocks in MS IOCTLs Prevent runtime resume/suspend while MS IOCTLs are in progressCheck if you run itEPSS 0.21%May 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Reynolds Progress Bar progress-bar allows Stored XSS.This issue affectsCheck if you run itEPSS 0.26%May 7, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf: Improve missing SIGTRAP checking To catch missing SIGTRAP we employ a WARN in __perf_event_overflow(), whiCheck this weekEPSS 20.00%May 1, 2025
- Low3.5NASA CryptoLib before 1.3.2 uses Extended Procedures that are a Work in Progress (not intended for use during flight), potentially leading to a keystream oracle.Check if you run itEPSS 0.60%Apr 27, 2025
- Critical9.8A SQL Injection vulnerability exists in the parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.Check this weekEPSS 51.00%Apr 17, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alan Petersen Author WIP Progress Bar author-work-in-progress-bar allows DOM-BCheck if you run itEPSS 0.36%Apr 16, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Stored XSS.TCheck if you run itEPSS 0.22%Apr 15, 2025
- High8.8scsi: qla2xxx: Implement ref count for SRBCheck if you run itEPSS 0.33%Feb 26, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data.Check if you run itEPSS 0.24%Dec 4, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtw_wait_firmware_completion()', al…Check if you run itEPSS 0.25%Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency In the commit aee2424246f9 ("R…Check if you run itEPSS 0.73%Oct 21, 2024
- UnknownProgress ui_for_wpf Deserialization of Untrusted DataPatch nowKEVEPSS 0.25%Oct 7, 2024
- UnknownProgress ui_for_wpf Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.74%Oct 7, 2024
- UnknownProgress ui_for_wpf Deserialization of Untrusted DataPatch nowKEVEPSS 0.46%Oct 7, 2024
- UnknownProgress ui_for_wpf Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.70%Oct 7, 2024
- UnknownProgress WhatsUp Gold Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 18.99%Sep 12, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityPatch nowKEVEPSS 93.00%Aug 29, 2024
- Unknownemilia progress_planner Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.26%Jun 27, 2024
- Critical9.8Progress WhatsUp Gold Path Traversal VulnerabilityPatch nowKEVEPSS 99.29%Jun 25, 2024