Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 running Cisco SIP Software could allow an unauthenticCheck if you run itEPSS 0.29%Oct 15, 2025
- Medium4.9A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitiveCheck if you run itEPSS 0.36%Oct 15, 2025
- Medium5.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 1.55%Oct 15, 2025
- High7.5Alloy Core libraries at the root of the Rust Ethereum ecosystem.Check if you run itEPSS 0.45%Oct 15, 2025
- Medium6.0A vulnerability was reported in the Lenovo LeCloud client application that, under certain conditions, could allow information disclosure.Check if you run itEPSS 0.26%Oct 15, 2025
- Low2.3An improper certificate validation vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow a user capable of intercepting network traffic to obtainCheck if you run itEPSS 0.09%Oct 15, 2025
- High8.5A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to aCheck if you run itEPSS 0.39%Oct 15, 2025
- Medium4.6When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may beCheck if you run itEPSS 0.18%Oct 15, 2025
- High7.7When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate.Check if you run itEPSS 0.34%Oct 15, 2025
- High8.7When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.43%Oct 15, 2025
- High8.7When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a vCheck if you run itEPSS 0.44%Oct 15, 2025
- Medium6.9On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility.Check if you run itEPSS 0.40%Oct 15, 2025
- Medium5.3Stored Cross-site Scripting (XSS) in Oct8ne Chatbot v2.3.Check if you run itEPSS 0.24%Oct 15, 2025
- Medium6.9In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client helloCheck if you run itEPSS 0.37%Oct 15, 2025
- Medium5.3The Oceanpayment CreditCard Gateway plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checksCheck if you run itEPSS 0.34%Oct 15, 2025
- Medium4.3The External Login plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.11.2 due to the 'exlog_test_connection' AJAX actionCheck if you run itEPSS 0.27%Oct 15, 2025
- Medium5.3The Content Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.8 through publicly exposed log files.Check if you run itEPSS 0.33%Oct 15, 2025
- High7.5The Woocommerce Category and Products Accordion Panel plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.0 via the 'categoryaccordioCheck if you run itEPSS 0.61%Oct 15, 2025
- Medium5.3The WhyDonate – FREE Donate button – Crowdfunding – Fundraising plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the remove_rowCheck if you run itEPSS 0.36%Oct 15, 2025
- Medium6.5The Wp tabber widget plugin for WordPress is vulnerable to SQL Injection via the 'wp-tabber-widget' shortcode in all versions up to, and including, 4.0 due to insufficient escapingCheck if you run itEPSS 0.28%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() There is a bug observed when rtw89_core_tx_Check if you run itEPSS 0.27%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix blk_mq_tags double free while nr_requests grown In the case user trigger tags grow by queue sysfs atCheck if you run itEPSS 0.20%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state->timer is a cyclic timerCheck if you run itEPSS 0.23%Oct 15, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000_release The original code uses cancel_delayed_work() in xc500Check if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free inCheck if you run itEPSS 0.16%Oct 15, 2025
Sort