Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Out-of-bounds read vulnerability in the runtime interpreter module.Check if you run itEPSS 0.10%Sep 5, 2025
- Medium6.8Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.Check if you run itEPSS 0.09%Sep 5, 2025
- Medium4.7An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.Check if you run itEPSS 0.29%Sep 5, 2025
- High8.4RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc.Check if you run itEPSS 0.17%Sep 5, 2025
- High8.1The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type parameter.Check if you run itEPSS 1.20%Sep 5, 2025
- High7.5Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.55%Sep 4, 2025
- Medium6.0ZF FROST is a Rust implementation of FROST (Flexible Round-Optimised Schnorr Threshold signatures).Check if you run itEPSS 0.29%Sep 4, 2025
- High7.2astro \@astrojs\/cloudflare Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.87%Sep 4, 2025
- Low2.1Weblate is a web based localization tool.Check if you run itEPSS 0.29%Sep 4, 2025
- Medium5.1api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© (PBX).Check if you run itEPSS 0.42%Sep 4, 2025
- Critical10.0argoproj argo_cd Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.66%Sep 4, 2025
- Critical9.3Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications.Check if you run itEPSS 0.28%Sep 4, 2025
- High8.2Promptcraft Forge Studio is a toolkit for evaluating, optimizing, and maintaining LLM-powered applications.Check if you run itEPSS 0.24%Sep 4, 2025
- Medium5.5In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy.Check if you run itEPSS 0.08%Sep 4, 2025
- High8.1In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check.Check if you run itEPSS 0.52%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to…Check if you run itEPSS 0.19%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpf_int_jit_compile() ski…Check if you run itEPSS 0.17%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header contains err…Check if you run itEPSS 0.16%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_re…Check if you run itEPSS 0.18%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe() function fails during initialization, the memor…Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative i…Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lpfc_sli4_re…Check if you run itEPSS 0.18%Sep 4, 2025
- Medium6.3NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration.Check if you run itEPSS 0.16%Sep 4, 2025
- Medium5.5NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorCheck if you run itEPSS 0.17%Sep 4, 2025
- Medium6.5NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of serviceCheck if you run itEPSS 0.29%Sep 4, 2025
Sort