Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7There is no memory isolation between CPU cores of the MIB3 infotainment.Check if you run itEPSS 0.21%Jun 28, 2025
- Medium5.4A specific flaw exists within the Bluetooth stack of the MIB3 infotainment.Check if you run itEPSS 0.34%Jun 28, 2025
- High8.0A specific flaw exists within the Bluetooth stack of the MIB3 unit.Check if you run itEPSS 0.55%Jun 28, 2025
- High8.0A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system.Check if you run itEPSS 0.37%Jun 28, 2025
- Medium6.5A specific flaw exists within the Bluetooth stack of the MIB3 infotainment.Check if you run itEPSS 0.38%Jun 28, 2025
- Medium5.7The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system toCheck if you run itEPSS 0.23%Jun 28, 2025
- Medium6.3The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving atCheck if you run itEPSS 0.20%Jun 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: unshare page tables during VMA split, not before Currently, __split_vma() triggers hugetlb page tablCheck if you run itEPSS 0.20%Jun 28, 2025
- Medium4.3The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incCheck if you run itEPSS 0.17%Jun 28, 2025
- Medium5.4IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.Check if you run itEPSS 0.23%Jun 28, 2025
- Medium4.3IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies.Check if you run itEPSS 0.16%Jun 28, 2025
- Medium5.4IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.Check if you run itEPSS 0.24%Jun 28, 2025
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.01%Jun 28, 2025
- UnknownExposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.75%Jun 28, 2025
- Unknownstitionai devika External Control of File Name or PathPatch nowKEVEPSS 2.07%Jun 28, 2025
- Unknowndataease dataease Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 15.88%Jun 28, 2025
- High8.1Roo Code is an AI-powered autonomous coding agent.Check if you run itEPSS 0.67%Jun 27, 2025
- Medium5.9Roo Code is an AI-powered autonomous coding agent.Check if you run itEPSS 0.50%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL InjectionCheck if you run itEPSS 0.40%Jun 27, 2025
- Medium5.2Software installed and running inside a Guest VM may override Firmware's state and gain access to the GPU.Check if you run itEPSS 0.14%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eron Software Wowwo CRM allows Blind SQL Injection.Check if you run itEPSS 0.40%Jun 27, 2025
- Critical9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection.Check if you run itEPSS 0.43%Jun 27, 2025
- High7.2Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') vulnerability.Check if you run itEPSS 0.65%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects AiosCheck if you run itEPSS 0.14%Jun 27, 2025
- Medium6.4The isMobile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘device’ parameter in all versions up to, and including, 1.1.1 due to insufficient input saniCheck if you run itEPSS 0.27%Jun 27, 2025
Sort