Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_sync_inode_meta() syzbot reported an UAF issue as below: [1] [2] [1] https://syzkCheck if you run itEPSS 0.19%Aug 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fs_evict_inode As syzbot [1] reported as below: R10: 0000000000000100 R11: 0000000Check if you run itEPSS 0.19%Aug 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: unlink NAPIs from queues on error to open CI hit a UaF in fbnic in the AF_XDP portion of the queues.Check if you run itEPSS 0.17%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes as soon as SRIOV VFs are created: kernel BUG at mm/vmalloc.c:3457Check if you run itEPSS 0.18%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid ref leak in nfsd_open_local_fh() If two calls to nfsd_open_local_fh() race and both successfully calCheck if you run itEPSS 0.12%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perf_mmap() fail When perf_mmap() fails to allocate a buffer, it still invokes the evenCheck if you run itEPSS 0.19%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/core: Handle buffer mapping fail correctly in perf_mmap() After successful allocation of a buffer or a succCheck if you run itEPSS 0.16%Aug 19, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core geCheck if you run itEPSS 0.17%Aug 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in composite_dev_cleanup() 1.Check if you run itEPSS 0.19%Aug 19, 2025
- Medium5.3A vulnerability was found in CodePhiliaX Chat2DB up to 0.3.7.Check if you run itEPSS 0.33%Aug 19, 2025
- Medium5.1Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams.Check if you run itEPSS 0.39%Aug 19, 2025
- Medium5.1A vulnerability has been found in jasonclark getsemantic up to 040c96eb8cf9947488bd01b8de99b607b0519f7d.Check if you run itEPSS 0.39%Aug 19, 2025
- Medium5.1A weakness has been identified in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.38%Aug 19, 2025
- Medium5.1A security flaw has been discovered in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.38%Aug 19, 2025
- Medium5.3Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.QCheck if you run itEPSS 0.28%Aug 19, 2025
- Medium5.3A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7.Check if you run itEPSS 0.52%Aug 19, 2025
- Medium4.6A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.3.120 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.8, 2025.Q1.0 through 2025.Q1.15, 2024.Q4.0Check if you run itEPSS 0.21%Aug 19, 2025
- Medium5.3A vulnerability was determined in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.34%Aug 19, 2025
- Medium5.1A vulnerability was found in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium5.1A vulnerability has been found in Scada-LTS 2.7.8.1.Check if you run itEPSS 0.30%Aug 19, 2025
- Medium6.4The Nexter Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 4.5.4 due to insufficient input sanitCheck if you run itEPSS 0.25%Aug 19, 2025
- Medium6.5A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address.Check if you run itEPSS 0.37%Aug 19, 2025
- High8.8Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode.Check if you run itEPSS 0.65%Aug 19, 2025
- Medium6.1An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image.Check if you run itEPSS 0.22%Aug 19, 2025
- Medium5.3EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)).Check if you run itEPSS 0.24%Aug 19, 2025
Sort