Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remCheck if you run itEPSS 0.20%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_helper_proto kernel test robot reported verifier bug [1] where thCheck if you run itEPSS 0.19%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in sCheck if you run itEPSS 0.20%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue This fixes the following UAF caused by not properly lockingCheck if you run itEPSS 0.25%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_syCheck if you run itEPSS 0.28%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed wCheck if you run itEPSS 0.15%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is in a group The kernel forbids the creation of non-FDB nexthopCheck if you run itEPSS 0.23%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI syzbot managed to trigger the following race: T1 T2 futex_wait_rCheck if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Use correct exit on failure from futex_hash_allocate_default() copy_process() uses the wrong error exit pCheck if you run itEPSS 0.14%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() When config osnoise cpus by write() syscall, tCheck if you run itEPSS 0.18%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The parameter provided by the virtual function (VF) is assigned directlyCheck if you run itEPSS 0.15%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40E_VF_STATE_ACTIVE is not the only state in which VCheck if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors fput() doesn't actually call file_operations release() synchCheck if you run itEPSS 0.11%Oct 15, 2025
- Medium6.4The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading shortcode in all versions up to, and including, 8.6.1.Check if you run itEPSS 0.21%Oct 15, 2025
- High8.5RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.5RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.5RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- Medium6.8A vulnerability exists in certain Dahua embedded products.Check if you run itEPSS 0.46%Oct 15, 2025
- High7.2In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write.Check if you run itEPSS 0.14%Oct 15, 2025
- High7.3The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable to privilege escalation in all versions up to, and includingCheck if you run itEPSS 0.23%Oct 15, 2025
- Medium4.3The Quick Featured Images plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 13.7.2 via the qfi_set_thumbnail and qfi_deleCheck if you run itEPSS 0.24%Oct 15, 2025
- Medium5.7In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.8The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theet_ajax_required_plugins_popup() function.Check if you run itEPSS 0.72%Oct 15, 2025
- Critical9.2Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.The tokenizer function copies characters from an input strinCheck if you run itEPSS 0.69%Oct 15, 2025
- Critical9.3DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrative interface that allows remote authentication as an undocumCheck if you run itEPSS 0.69%Oct 15, 2025
Sort