Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.53%Oct 1, 2025
- High7.5Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community.Check if you run itEPSS 0.37%Oct 1, 2025
- Medium4.3Discourse is an open-source community discussion platform.Check if you run itEPSS 0.26%Oct 1, 2025
- High7.6In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure.Check if you run itEPSS 0.34%Oct 1, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium4.8A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (UnifCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco Cyber Vision Center could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks againCheck if you run itEPSS 0.22%Oct 1, 2025
- Medium5.7In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does nCheck if you run itEPSS 0.37%Oct 1, 2025
- Medium4.9In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a user who holds a role tCheck if you run itEPSS 0.56%Oct 1, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/iCheck if you run itEPSS 0.30%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware resources Currently, in ath11k_ahb_fw_resources_init(), iommu domCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If create_qp does not fully succeed it is possible for qp cleanup codCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jbd2: check 'jh->b_transaction' before removing it from checkpoint Following process will corrupt ext4 image: StCheck if you run itEPSS 0.16%Oct 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifierCheck if you run itEPSS 0.12%Oct 1, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msg_max is too small in mtu negotiation When doing link mtu negotiation, a maliciousCheck if you run itEPSS 0.30%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifecycle because it has a 'struct device' emCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix memory leak of device names The device names allocated by dev_set_name() need be freed before mCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tested and found an alarm caused by nbd_ioctl arg without verificCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring: fix fget leak when fs don't support nowait buffered read Heming reported a BUG when using io_uring doiCheck if you run itEPSS 0.15%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interrupted In ublk_ctrl_start_dev(), if wait_for_completion_interrCheck if you run itEPSS 0.17%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister devlink params in case interface is down Currently, in case an interface is down, mlx5 drivCheck if you run itEPSS 0.16%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previously, ext4_get_group_info() would treat an invalid group numberCheck if you run itEPSS 0.16%Oct 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind When unbinding pasid - a race conCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc of the sfb type, the cCheck if you run itEPSS 0.16%Oct 1, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwinding of XDP initialization When initializing XDP in virtnet_open(), some rq xdp initiCheck if you run itEPSS 0.16%Oct 1, 2025
Sort