Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: check p->vec_buf for NULL When the PAGEMAP_SCAN ioctl is invoked with vec_len = 0 reaches pageCheck if you run itEPSS 0.24%Oct 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: kmsan: fix out-of-bounds access to shadow memory Running sha224_kunit on a KMSAN-enabled kernel results in a craCheck if you run itEPSS 0.25%Oct 20, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole.Check if you run itEPSS 0.20%Oct 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirectCheck if you run itEPSS 0.20%Oct 20, 2025
- High7.2Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementCheck this weekEPSS 23.18%Oct 20, 2025
- Medium5.9Out-of-bounds Write in unfilter_scanline in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to write pasCheck if you run itEPSS 0.39%Oct 20, 2025
- Medium5.9Out-of-bounds Read in lws_upng_emit_next_line in warmcat libwebsockets allows, when the LWS_WITH_UPNG flag is enabled during compilation and the HTML display stack is used, to readCheck if you run itEPSS 0.39%Oct 20, 2025
- High7.5Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stackCheck if you run itEPSS 0.29%Oct 20, 2025
- High8.4ETERNUS SF provided by Fsas Technologies Inc.Check if you run itEPSS 0.19%Oct 20, 2025
- Critical9.8SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint.Check if you run itEPSS 0.58%Oct 20, 2025
- High8.8Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component.Check if you run itEPSS 0.60%Oct 20, 2025
- Critical9.8An issue was discovered in Dolby UDC 4.5 through 4.13.Check if you run itEPSS 1.59%Oct 20, 2025
- Critical10.0geovision gv-bx1500_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.27%Oct 20, 2025
- Low2.0A weakness has been identified in bftpd up to 6.2.Check if you run itEPSS 0.18%Oct 19, 2025
- Medium5.1A vulnerability was identified in toeverything AFFiNE up to 0.24.1.Check if you run itEPSS 0.33%Oct 19, 2025
- Medium6.9A vulnerability has been found in 70mai X200 up to 20251010.Check if you run itEPSS 0.75%Oct 19, 2025
- Medium6.9A flaw has been found in 70mai X200 up to 20251010.Check if you run itEPSS 1.09%Oct 19, 2025
- Medium5.3A vulnerability was detected in e107 CMS up to 2.3.3.Check if you run itEPSS 0.93%Oct 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work The origin code calls cancel_delayed_work()Check if you run itEPSS 0.26%Oct 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix use-after-free in tb_dp_dprx_work The original code relies on cancel_delayed_work() in tb_dp_dpCheck if you run itEPSS 0.25%Oct 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue During the detaching of Marvell's SAS/SATA controller, thCheck if you run itEPSS 0.26%Oct 18, 2025
- Medium5.3The PowerBI Embed Reports plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.47%Oct 18, 2025
- Critical9.8The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image cropper funcCheck if you run itEPSS 1.00%Oct 18, 2025
- High7.5The Event Tickets and Registration plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 5.26.5.Check if you run itEPSS 0.40%Oct 18, 2025
- Medium5.3The Media Library Assistant plugin for WordPress is vulnerable to limited file reading in all versions up to, and including, 3.29 via the mla-stream-image.php file.Check if you run itEPSS 0.41%Oct 18, 2025
Sort