Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers While using nvme target…Check if you run itEPSS 0.46%Mar 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit ("iommu/vt-d: Allocate DMAR fault interrupts locally")…Check if you run itEPSS 0.22%Mar 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in th…Check if you run itEPSS 0.23%Mar 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers Other, non DAI copier widgets cou…Check if you run itEPSS 0.21%Mar 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() KMSAN reported a use-after-free issue…Check if you run itEPSS 0.21%Mar 27, 2025
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Deserialization of Untrusted DataPatch nowKEVEPSS 0.59%Mar 27, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 78.36%Mar 27, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 32.40%Mar 27, 2025
- Unknownmatrix synapse Improper Input ValidationPatch nowKEVEPSS 1.23%Mar 26, 2025
- High7.2D-Link DIR-823X Command Injection VulnerabilityPatch nowKEVEPSS 87.94%Mar 25, 2025
- High8.3Google Chromium Mojo Sandbox Escape VulnerabilityPatch nowKEVEPSS 9.24%Mar 25, 2025
- UnknownUser Registration & Membership WordPress Plugin Membership Addon Privilege EscalationPatch nowKEVEPSS 49.08%Mar 25, 2025
- Unknownkubernetes ingress-nginx Improper Isolation or CompartmentalizationPatch nowKEVEPSS 99.38%Mar 23, 2025
- UnknownHorde imp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 31.29%Mar 21, 2025
- UnknownWhatsApp PDF Content Sandbox BypassPatch nowKEVEPSS 0.26%Mar 19, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.88%Mar 19, 2025
- Unknownvicidial vicidial Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 79.27%Mar 19, 2025
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 76.80%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.54%Mar 19, 2025
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 2.69%Mar 19, 2025
- UnknownLiteSpeed Technologies openlitespeed Untrusted Search PathPatch nowKEVEPSS 1.43%Mar 19, 2025
- UnknownApache pyarrow Deserialization of Untrusted DataPatch nowKEVEPSS 14.53%Mar 16, 2025
- UnknownUNKNOWN READ in _blit_xrgb32_lerp_spansOpen the advisoryMar 15, 2025
Sort