Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.2An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to rediCheck if you run itEPSS 0.11%Nov 12, 2025
- Medium4.6Tuleap is an Open Source Suite to improve management of software developments and collaboration.Check if you run itEPSS 0.15%Nov 12, 2025
- Medium4.3IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by the user interCheck if you run itEPSS 0.23%Nov 12, 2025
- High8.1Open Access Management (OpenAM) is an access management solution.Check if you run itEPSS 0.35%Nov 12, 2025
- High7.0The Datadog Agent collects events and metrics from hosts and sends them to Datadog.Check if you run itEPSS 0.12%Nov 12, 2025
- Low3.7CUPS is a standards-based, open-source printing system, and contains the code of the filters of the former package as library functions to be used for the data format conversion taCheck if you run itEPSS 0.48%Nov 12, 2025
- Medium5.9Drupal core - Moderately critical - Gadget chain - SA-CORE-2025-006Check if you run itEPSS 0.28%Nov 12, 2025
- Medium5.3A vulnerability was identified in Campcodes School Fees Payment Management System 1.0.Check if you run itEPSS 0.35%Nov 12, 2025
- Medium5.3Omnissa Workspace ONE UEM contains an observable response discrepancy vulnerability.Check if you run itEPSS 0.26%Nov 12, 2025
- Medium6.9CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on the local network to gain access to the user account by perfCheck if you run itEPSS 0.45%Nov 12, 2025
- High7.2The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 1.3 due to insufficientCheck if you run itEPSS 0.39%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix bootlog initialization ordering As soon as we queue MHI buffers to receive the bootlog from theCheck if you run itEPSS 0.20%Nov 12, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_msg_hold to cCheck if you run itEPSS 0.49%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: idpf: cleanup remaining SKBs in PTP flows When the driver requests Tx timestamp value, one of the first steps isCheck if you run itEPSS 0.19%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix SMP ordering in switch_mm_irqs_off() Stephen noted that it is possible to not have an smp_mb() betweCheck if you run itEPSS 0.14%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() Currently, if find_and_map_user_pages() tCheck if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative offsets for ALU ops When verifying BPF programs, the check_alu_op() function validates instCheck if you run itEPSS 0.15%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: m2m: Fix streaming cleanup on release If streamon/streamoff calls are imbalanced, such asCheck if you run itEPSS 0.15%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smp_processor_id() in preemptible code warnings Syzbot reported the following warning: BUG: usCheck if you run itEPSS 0.19%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdw_utils: avoid NULL deref when devm_kasprintf() fails devm_kasprintf() may return NULL on memory allCheck if you run itEPSS 0.20%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The driver incorrectly determines SGI vs SPI interrupts by checkiCheck if you run itEPSS 0.20%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change find_virq() to return -EEXIST when a VIRQ is bound to a differCheck if you run itEPSS 0.20%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: Harden userspace-supplied xdp_desc validation Turned out certain clearly invalid values passed in xdp_descCheck if you run itEPSS 0.15%Nov 12, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_output() Use RCU in ip6_output() in order to use dst_dev_rcu() to prevent possible UAF.Check if you run itEPSS 0.56%Nov 12, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: debugfs: Fix legacy mode page table dump logic In legacy mode, SSPTPTR is ignored if TT is not 00b oCheck if you run itEPSS 0.19%Nov 12, 2025
Sort