Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0In the Linux kernel, the following vulnerability has been resolved: net: phylink: add lock for serializing concurrent pl->phydev writes with resolver Currently phylink_resolve() prCheck if you run itEPSS 0.11%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: arm64: kexec: initialize kexec_buf struct in load_other_segments() Patch series "kexec: Fix invalid field accessCheck if you run itEPSS 0.13%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing kernel panic When there are memory-only nodes (nodes without CPUCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is invalid in object_err() object_err() reports details of an objCheck if you run itEPSS 0.17%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bsearch to look for the 'cCheck if you run itEPSS 0.15%Oct 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm When send a broadcast packCheck if you run itEPSS 0.33%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe error and device remove The on-host hardware ECC engine remaCheck if you run itEPSS 0.13%Oct 1, 2025
- High8.8An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R.Check if you run itEPSS 0.48%Oct 1, 2025
- Medium4.0The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.12 via tCheck if you run itEPSS 0.30%Oct 1, 2025
- Medium5.9The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publiCheck if you run itEPSS 0.38%Oct 1, 2025
- High8.8TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function.Check if you run itEPSS 1.54%Oct 1, 2025
- Medium6.5TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCfg function.Check if you run itEPSS 1.02%Oct 1, 2025
- Medium4.3IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details, bookmarks, and notifications of an arbitrary organization.Check if you run itEPSS 0.22%Oct 1, 2025
- High8.8Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution (RCE) vulnerability in the User module configuration via the computed field parameter.Check if you run itEPSS 0.50%Oct 1, 2025
- High8.8File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality.Check if you run itEPSS 0.52%Oct 1, 2025
- High8.2In Frappe ERPNext 15.57.5, the function get_rfq_containing_supplier() at erpnext/buying/doctype/request_for_quotation/request_for_quotation.py is vulnerable to SQL Injection, whichCheck if you run itEPSS 0.33%Oct 1, 2025
- High8.1A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file.Check if you run itEPSS 0.40%Oct 1, 2025
- Low2.9Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as GTS_PDFEVersion) of a PDF document, e.gCheck if you run itEPSS 0.13%Oct 1, 2025
- High8.7Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authenCheck if you run itEPSS 0.26%Sep 30, 2025
- Medium6.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.48%Sep 30, 2025
- Medium4.9IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive informCheck if you run itEPSS 0.30%Sep 30, 2025
- High8.7NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action.Check if you run itEPSS 0.24%Sep 30, 2025
- Medium4.6NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Attacker may cause an authorized action.Check if you run itEPSS 0.22%Sep 30, 2025
- Low2.4NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an User/Attacker may cause an authorized action.Check if you run itEPSS 0.13%Sep 30, 2025
- Medium6.4A container privilege escalation flaw was found in KServe ModelMesh container images.Check if you run itEPSS 0.16%Sep 30, 2025
Sort