Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix in_atomic() handling in do_secure_storage_access() Kernel user spaces accesses to not…Check if you run itEPSS 0.17%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA region, the rCheck if you run itEPSS 0.21%Jul 25, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.Check if you run itEPSS 0.22%Jul 25, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The function core_scsi3_decode_speCheck if you run itEPSS 0.50%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: reallocate BAM transactions Using the mtd_nandbiterrs module for testing the driver occasioCheck if you run itEPSS 0.16%Jul 25, 2025
- High8.4In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an array ofCheck if you run itEPSS 0.21%Jul 25, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung up in writeback waitingCheck if you run itEPSS 0.40%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platform firmware update thatCheck if you run itEPSS 0.21%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling __xa_store() and __xa_erase() were used without holCheck if you run itEPSS 0.22%Jul 25, 2025
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and directory logging We have a race between a rename and directory inode loggCheck if you run itEPSS 0.36%Jul 25, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() Temporarily clear the preallocation flag when explicCheck if you run itEPSS 0.19%Jul 25, 2025
- Medium5.1A vulnerability has been found in D-Link DCS-6010L 1.15.03 and classified as problematic.Check this weekEPSS 25.26%Jul 25, 2025
- Medium6.1The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting wCheck if you run itEPSS 0.30%Jul 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in zhousg letao up to 7d8df0386a65228476290949e0413de48f7fbe98.Check if you run itEPSS 0.37%Jul 25, 2025
- Critical9.8The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the *_ajax_save_optioCheck if you run itEPSS 3.06%Jul 25, 2025
- Medium4.3Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accounts.Check if you run itEPSS 0.28%Jul 25, 2025
- Medium4.1OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag.Check if you run itEPSS 0.23%Jul 25, 2025
- Medium6.1A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint.Check if you run itEPSS 0.37%Jul 25, 2025
- Medium6.1OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog posts.Check if you run itEPSS 0.28%Jul 25, 2025
- High8.8Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext.Check if you run itEPSS 0.66%Jul 25, 2025
- Low2.9JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter.Check if you run itEPSS 0.30%Jul 25, 2025
- High8.9LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices.Check if you run itEPSS 0.87%Jul 24, 2025
- High8.5Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own.Check if you run itEPSS 4.20%Jul 24, 2025
- High7.1HCL iAutomate is affected by an insufficient session expiration.Check if you run itEPSS 0.38%Jul 24, 2025
- Critical9.3The embedded web server on the thermostat listed version ranges contain a vulnerability that allows unauthenticated attackers, either on the local area network or from the InternetCheck if you run itEPSS 0.56%Jul 24, 2025
Sort