Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur if the following conditions occur due toCheck this weekEPSS 16.00%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets test-case [1] crashing inCheck this weekEPSS 18.00%Sep 4, 2025
- Low3.7A flaw was found in glib.Check this weekEPSS 42.00%Sep 3, 2025
- UnknownVMware Workspace ONE Access and Identity Manager Improper AuthenticationPatch nowKEVEPSS 49.53%Sep 3, 2025
- High7.7A command injection vulnerability has been reported to affect several QNAP operating system versions.Check this weekEPSS 91.00%Aug 29, 2025
- High7.1A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.24%Aug 29, 2025
- Low1.8Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Open the advisoryAug 29, 2025
- Medium5.9Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 1.5.1 allows an attacker to recover p…Open the advisoryAug 29, 2025
- Medium5.9Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.1.0 and prior to 3.9.2 allows an attacker to recover plaintexts…Open the advisoryAug 29, 2025
- High8.7Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface.Check if you run itEPSS 1.74%Aug 28, 2025
- Medium6.0A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any fileCheck this weekEPSS 18.00%Aug 27, 2025
- Critical9.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php).Check if you run itEPSS 9.04%Aug 27, 2025
- High8.8An issue was discovered in Mahara 23.04.8 and 24.04.4.Check this weekEPSS 32.00%Aug 26, 2025
- High8.8Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra.Check this weekEPSS 52.00%Aug 25, 2025
- UnknownJuniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Aug 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix NULL dereference on unbind due to stale coupling data Failing to reset coupling_desc.n_coupCheck this weekEPSS 16.00%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject TDLS operations when station is not associated syzbot triggered a WARN in ieee80211_tdls_Check this weekEPSS 16.00%Aug 22, 2025
- High8.4Magix Musik Maker 16 is vulnerable to a stack-based buffer overflow due to improper handling of .mmm arrangement files.Check if you run itEPSS 0.41%Aug 20, 2025
- Critical9.3LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser.Check if you run itEPSS 1.19%Aug 20, 2025
- High8.4AOL Desktop 9.6 contains a buffer overflow vulnerability in its Tool\rich.rct component when parsing .rtx files.Check if you run itEPSS 0.58%Aug 20, 2025
- Medium4.3A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack.Check this weekEPSS 23.00%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() When gmin_get_config_var() calls efi.geCheck this weekEPSS 22.00%Aug 19, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in cifs_oplock_break A race condition can occur in cifs_oplock_break() leading tCheck if you run itEPSS 0.43%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject VHT opmode for unsupported channel widths VHT operating mode notifications are not defineCheck this weekEPSS 13.00%Aug 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: Allow CPU to reschedule while setting per-page memory attributes When running an SEV-SNP guest with a suffiCheck this weekEPSS 12.00%Aug 16, 2025