Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: mtd: Fix device name leak when register device failed in add_mtd_device() There is a kmemleak when register deviCheck if you run itEPSS 0.25%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: s390/netiucv: Fix return type of netiucv_tx() With clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANGCheck if you run itEPSS 0.25%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Call acpi_put_table() to fix memory leak The start and length of the event log area are obtained fromCheck if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: iio: fix memory leak in iio_device_register_eventset() When iio_device_register_sysfs_group() returns failed, iiCheck if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: fix memleak on platform_device_add() fails No error handling is performed when platform_device_adCheck if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pinctrl: thunderbay: fix possible memory leak in thunderbay_build_functions() The thunderbay_add_functions() wilCheck if you run itEPSS 0.21%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm: Fix potential null-ptr-deref due to drmm_mode_config_init() drmm_mode_config_init() will call drm_mode_creaCheck if you run itEPSS 0.21%Oct 22, 2025
- Medium5.4Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py.Check if you run itEPSS 0.28%Oct 22, 2025
- Medium4.3In langgenius/dify-web version 1.6.0, the authentication mechanism reveals the existence of user accounts by returning different error messages for non-existent and existing accounCheck if you run itEPSS 0.70%Oct 22, 2025
- Medium5.7NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks.Check if you run itEPSS 0.33%Oct 22, 2025
- Medium4.3The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and inclCheck if you run itEPSS 0.19%Oct 22, 2025
- Medium6.9Connection desynchronization between an HTTP proxy and the model backend.Check if you run itEPSS 0.32%Oct 22, 2025
- Medium4.9The Email Tracker – Email Log, Email Open Tracking, Email Analytics & Email Management for WordPress Emails plugin for WordPress is vulnerable to SQL Injection via the 'orderby' paCheck if you run itEPSS 0.37%Oct 22, 2025
- Medium6.4The WP-Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'roboshot' shortcode in all versions up to, and including, 1.1.Check if you run itEPSS 0.23%Oct 22, 2025
- Medium6.4The JB News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'jbticker' shortcode in all versions up to, and includiCheck if you run itEPSS 0.29%Oct 22, 2025
- Medium5.3Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3.Check if you run itEPSS 0.19%Oct 22, 2025
- High7.0Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK.Check if you run itEPSS 0.25%Oct 22, 2025
- High8.7Ghost Robotics Vision 60 v0.27.2 includes, among its physical interfaces, three RJ45 connectors and a USB Type-C port.Check if you run itEPSS 0.63%Oct 22, 2025
- Critical9.2The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to the robot from an external attack station, impersonating theCheck if you run itEPSS 0.31%Oct 22, 2025
- High7.5An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests.Check if you run itEPSS 0.47%Oct 22, 2025
- Medium5.3The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site'Check if you run itEPSS 0.25%Oct 22, 2025
- Medium5.5The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'order_mail' setting in versions up to, and including, 2.11.22.Check if you run itEPSS 0.25%Oct 22, 2025
- High8.7This High severity Path Traversal (Arbitrary Write) vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server.Check if you run itEPSS 0.50%Oct 22, 2025
- Low3.1On Mercku M6a devices through 2.1.0, session tokens remain valid for at least months in some cases.Check if you run itEPSS 0.16%Oct 22, 2025
- High7.5Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function.Check if you run itEPSS 0.42%Oct 22, 2025
Sort