Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: ena: fix shift-out-of-bounds in exponential backoff The ENA adapters on our instances occasionally reset.Check if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: fix i_disksize exceeding i_size problem in paritally written case It is possible for i_disksize can exceedCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: block: ublk: make sure that block size is set correctly block size is one very key setting for block layer, andCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event() The kfree() should be called when memoryCheck if you run itEPSS 0.16%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Fix possible memory leak of ffh_ctxt Allocated 'ffh_ctxt' memory leak is possible if the SMCCC versCheck if you run itEPSS 0.14%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe Use devm_of_iomap() instead of of_iomap() toCheck if you run itEPSS 0.16%Sep 16, 2025
- High8.6Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software Vega Master allows Directory Indexing.Check if you run itEPSS 0.28%Sep 16, 2025
- Low3.2Click Studios Passwordstate before 9.9 Build 9972 has a potential authentication bypass for Passwordstate emergency access.Check if you run itEPSS 0.15%Sep 16, 2025
- Medium5.4A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application.Check if you run itEPSS 0.18%Sep 16, 2025
- High8.0Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object parameter in the openwrt_getConfig function.Check if you run itEPSS 2.02%Sep 16, 2025
- High7.3code-projects Computer Laboratory System 1.0 has a file upload vulnerability.Check if you run itEPSS 0.32%Sep 16, 2025
- High7.5The /api/comment endpoint in zhangyd-c OneBlog 2.3.9 contains a denial-of-service vulnerability.Check if you run itEPSS 0.40%Sep 16, 2025
- Medium6.1A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do componentCheck if you run itEPSS 0.33%Sep 16, 2025
- Critical9.1A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration (ZCS) allows an attacker with valid user credentials to bypass Two-Factor Authentication (2FCheck if you run itEPSS 0.64%Sep 16, 2025
- High8.0SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AdCheck if you run itEPSS 0.51%Sep 16, 2025
- High7.8A parsing issue in the handling of directory paths was addressed with improved path validation.Check if you run itEPSS 0.24%Sep 15, 2025
- High7.0A race condition was addressed with improved state handling.Check if you run itEPSS 0.26%Sep 15, 2025
- High7.8A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.34%Sep 15, 2025
- High7.8A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.19%Sep 15, 2025
- High7.8A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.32%Sep 15, 2025
- Medium5.3A weakness has been identified in SourceCodester Online Student File Management System 1.0.Check if you run itEPSS 0.35%Sep 15, 2025
- Medium6.9An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and performCheck if you run itEPSS 0.45%Sep 15, 2025
- Medium6.6FreePBX is an open-source web-based graphical user interface.Check if you run itEPSS 0.46%Sep 15, 2025
- Medium5.3A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464.Check if you run itEPSS 0.34%Sep 15, 2025
- Medium5.9Openfire is an XMPP server licensed under the Open Source Apache License.Check if you run itEPSS 0.23%Sep 15, 2025
Sort