Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix error handling path in bnxt_init_chip() WARN_ON() is triggered in __flush_work() if bnxt_init_chip(Check if you run itEPSS 0.20%May 20, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net: use sock_gen_put() when sk_state is TCP_TIME_WAIT It is possible for a pointer of type struct inet_timewaitCheck if you run itEPSS 0.49%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the theauthName parameter in the web_aaa_loginAuthlistEdit function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bytftp_srvip parameter in the web_tool_upgradeManager_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the bindEditMACName parameter in the web_acl_bindEdit_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radDftParamKey parameter in the web_radiusSrv_dftParam_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web_acl_mgmt_Rules_Apply_post function.Check if you run itEPSS 0.74%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_v3host_add_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv3_add_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_globalSetting_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web_radiusSrv_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_remote_engineId_add_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the tacIp parameter in the web_tacplus_serverEdit_post function.Check if you run itEPSS 0.55%May 20, 2025
- Critical9.8D-link DI-8100 16.07.26A1 is vulnerable to Command Injection.Check this weekEPSS 21.59%May 20, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through <= 5.2.2.Check if you run itEPSS 0.48%May 19, 2025
- High7.5Multer is a node.js middleware for handling .Check if you run itEPSS 0.80%May 19, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks FoCheck if you run itEPSS 0.36%May 19, 2025
- Medium5.3Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through 1.0.11.Check if you run itEPSS 0.27%May 19, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0.Check if you run itEPSS 0.52%May 19, 2025
- Medium6.0ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering.Check if you run itEPSS 0.11%May 19, 2025
- High7.6OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.42%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in duwasai Flashy allows Reflected XSS.This issue affects Flashy: from n/a througCheck if you run itEPSS 0.23%May 19, 2025
- Medium5.3A vulnerability was found in PHPGurukul Employee Record Management System 1.3.Check if you run itEPSS 0.48%May 19, 2025
Sort