Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl is s8 but it must contain offsets into slotCheck if you run itEPSS 0.22%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: jfs: Fix null-ptr-deref in jfs_ioc_trim [ Syzkaller Report ] Oops: general protection fault, probably for non-caCheck if you run itEPSS 0.19%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() bpf_map_lookup_percpu_elem() helper is alsCheck if you run itEPSS 0.18%Jul 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix memory leak due to multiple rx_stats allocation rx_stats for each arsta is allocated when addiCheck if you run itEPSS 0.21%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: validate buffer count with offset for cloning syzbot reports that it can trigger a WARN_ON() forCheck if you run itEPSS 0.15%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: reject invalid perturb period Gerrard Tai reported that SFQ perturb_period has no range checCheck if you run itEPSS 0.21%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: atm: Revert atm_account_tx() if copy_from_iter_full() fails.Check if you run itEPSS 0.20%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() The RPC container is released after being passed to r53Check if you run itEPSS 0.21%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() Before the commit under the Fixes tag below,Check if you run itEPSS 0.18%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer The reproduction steps: 1.Check if you run itEPSS 0.21%Jul 4, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() Before calling lan743x_ptp_iCheck if you run itEPSS 0.19%Jul 4, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().Check if you run itEPSS 0.56%Jul 4, 2025
- Medium6.9Timing difference in password reset in Ergon Informatik AG's Airlock IAM 7.7.9, 8.0.8, 8.1.7, 8.2.4 and 8.3.1 allows unauthenticated attackers to enumerate usernames.Check if you run itEPSS 0.37%Jul 4, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dsrodzin Email Address Security by WebEmailProtector webemailprotector allowsCheck if you run itEPSS 0.23%Jul 4, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LCweb PrivateContent - Mail Actions allows PHP Local File ICheck if you run itEPSS 0.62%Jul 4, 2025
- High7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows SQL InjeCheck if you run itEPSS 0.28%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binderfs 16 --timeout 300' under KASANCheck if you run itEPSS 0.17%Jul 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Do not double dequeue a configuration request Some of our devices crash in tb_cfg_request_dequeue()Check if you run itEPSS 0.27%Jul 4, 2025
- Medium5.3Missing Authorization vulnerability in kamleshyadav CF7 7 Mailchimp Add-on CF7-mailchimp-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue afCheck if you run itEPSS 0.25%Jul 4, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Server Side Request Forgery.This issue affects URL Shortener: from n/a throCheck if you run itEPSS 0.19%Jul 4, 2025
- Medium6.5A flaw was found in the key export functionality of libssh.Check if you run itEPSS 0.61%Jul 4, 2025
- Medium5.0A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation.Check if you run itEPSS 0.50%Jul 4, 2025
- Critical9.0An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3.Check if you run itEPSS 6.88%Jul 3, 2025
- High7.5Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution.Check if you run itEPSS 4.22%Jul 3, 2025
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in WebFactory AiBud WP aibuddy-openai-chatgpt allows Upload a Web Shell to a Web Server.This issue affects AiBud WP: fCheck if you run itEPSS 0.50%Jul 3, 2025
Sort