Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0.Check this weekEPSS 42.00%Sep 15, 2025
- Low3.7feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delete, e.g., it allows a "kubectl version;Check this weekEPSS 30.00%Sep 15, 2025
- High8.1SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users to forge high privileged (such as adminCheck this weekEPSS 43.00%Sep 15, 2025
- Medium6.9A security flaw has been discovered in Shenzhen Sixun Business Management System 7/11.Check this weekEPSS 36.00%Sep 13, 2025
- High7.2An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent (Windows-based) can expose the service account password under specific non-default configurCheck this weekEPSS 18.00%Sep 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm: Always split write BIOs to zoned device limits Any zoned DM target that requires zone append emulation willCheck if you run itEPSS 0.16%Sep 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated usersCheck if you run itEPSS 0.49%Sep 12, 2025
- Critical9.8OpenSynergy BlueSDK (aka Blue SDK) through 6.x has a Use-After-Free.Check if you run itEPSS 7.31%Sep 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm: dm-crypt: Do not partially accept write BIOs with zoned targets Read and write operations issued to a dm-cryCheck if you run itEPSS 0.13%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_checkCheck if you run itEPSS 0.13%Sep 11, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When performing Generic Segmentation OfCheck if you run itEPSS 0.38%Sep 11, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup error handling Currently, TID is not decremented before peer cCheck this weekEPSS 24.00%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: shutdown driver when hardware is unreliable In rare cases, ath10k may lose connection with the PCICheck this weekEPSS 16.00%Sep 11, 2025
- Medium6.0Under heavy system utilization a random race condition can occur during authentication or token refresh operation.Check if you run itEPSS 0.14%Sep 11, 2025
- Medium4.3The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6.Check this weekEPSS 17.00%Sep 10, 2025
- Medium4.4Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Open the advisorySep 9, 2025
- Low3.1A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses.Check this weekEPSS 43.00%Sep 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to…Open the advisorySep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP Since the CAAM on these SoCs is managed by anotherCheck this weekEPSS 15.00%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE As described in commit 7a54947e727b ('MeCheck this weekEPSS 16.00%Sep 5, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exceCheck if you run itEPSS 0.17%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown() isCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative i…Open the advisorySep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access In the preparation stage of CPU online, ifCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur if the following conditions occur due toCheck this weekEPSS 16.00%Sep 4, 2025