Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in pad_compress_skb If alloc_skb() fails in pad_compress_skb(), it returns NULL without relCheck if you run itEPSS 0.16%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In __iodyn_find_io_region(), pcmcia_make_resoCheck if you run itEPSS 0.16%Sep 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Define ARCH_PAGE_TABLE_SYNC_MASK andCheck if you run itEPSS 0.16%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm: move page table sync declarations to linux/pgtable.h During our internal testing, we started observing interCheck if you run itEPSS 0.15%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock recursion.Check if you run itEPSS 0.12%Sep 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2_delete_osb(), ocfs2_journal_shuCheck if you run itEPSS 0.17%Sep 19, 2025
- Low2.1A weakness has been identified in JeecgBoot up to 3.8.2.Check if you run itEPSS 0.41%Sep 19, 2025
- Medium6.9A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0.Check if you run itEPSS 0.97%Sep 19, 2025
- Medium4.3Grafana is an open-source platform for monitoring and observability.Check if you run itEPSS 0.36%Sep 19, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pusula Communication Information Internet Industry and Trade Ltd.Check if you run itEPSS 0.23%Sep 19, 2025
- Critical9.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.Check if you run itEPSS 0.42%Sep 19, 2025
- High7.1A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT).Check if you run itEPSS 0.21%Sep 19, 2025
- Medium5.4The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX actionCheck if you run itEPSS 0.27%Sep 19, 2025
- Critical9.8The Goza - Nonprofit Charity WordPress Theme theme for WordPress is vulnerable to unauthorized arbitrary file uploads due to a missing capability check on the 'beplus_import_pack_iCheck if you run itEPSS 0.75%Sep 19, 2025
- Medium6.1Libraesva Email Security Gateway Command Injection VulnerabilityPatch nowKEVEPSS 1.86%Sep 19, 2025
- Medium6.5Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation.Check if you run itEPSS 0.24%Sep 19, 2025
- High8.0An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.Check if you run itEPSS 0.33%Sep 19, 2025
- Low3.7PureVPN client applications on Linux through September 2025 mishandle firewalling.Check if you run itEPSS 0.21%Sep 18, 2025
- Low3.7PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume.Check if you run itEPSS 0.22%Sep 18, 2025
- High8.6An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded password embedded in publicly available software.Check if you run itEPSS 0.24%Sep 18, 2025
- Critical9.3Dover Fueling Solutions ProGauge MagLink LX4 Devices have default root credentials that cannot be changed through standard administrative means.Check if you run itEPSS 0.44%Sep 18, 2025
- Critical9.3The secret used for validating authentication tokens is hardcoded in device firmware for affected versions.Check if you run itEPSS 0.73%Sep 18, 2025
- High7.3LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.35%Sep 18, 2025
- Medium6.9A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0.Check if you run itEPSS 0.48%Sep 18, 2025
- Low1.8SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalCheck if you run itEPSS 0.12%Sep 18, 2025
Sort