Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to avoid UAF ib_dealloc_device() should be called…Check if you run itEPSS 0.15%Oct 1, 2025
- Unknowngl-inet gl-ax1800_firmware Improper AuthenticationPatch nowKEVEPSS 47.80%Sep 3, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching vcaching allows Stored…Open the advisoryAug 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on STA interface When operating in concurrent STA/…Check if you run itEPSS 0.19%Aug 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test This fixes the tx timeout…Check if you run itEPSS 0.16%Aug 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, cal…Check if you run itEPSS 0.54%Jul 25, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: bnxt: properly flush XDP redirect lists We encountered following crash when testing a XDP_REDIRECT feature in prCheck if you run itEPSS 0.34%Jul 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() Before the commit under the Fixes tag below,Check this weekEPSS 18.00%Jul 4, 2025
- High7.2The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpvivid_upload_Check this weekEPSS 55.47%Jul 3, 2025
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end with the bottom label sCheck if you run itEPSS 0.48%Jul 3, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 39.68%Jul 2, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in pebas CouponXxL couponxxl allows Object Injection.This issue affects CouponXxL: from n/a through <= 3.0.0.Check this weekEPSS 46.00%Jun 27, 2025
- High8.6Incorrect Privilege Assignment vulnerability in pebas CouponXxL Custom Post Types couponxxl-cpt allows Privilege Escalation.This issue affects CouponXxL Custom Post Types: from n/aCheck this weekEPSS 29.00%Jun 27, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set theCheck this weekEPSS 20.00%Jun 18, 2025
- Medium5.1A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0.Check if you run itEPSS 0.41%Jun 12, 2025
- Medium5.2A vulnerability has been identified in Perfect Harmony GH180 (All versions >= V8.0 < V8.3.3 with NXGPro+ controller manufactured between April 2020 to April 2025).Check this weekEPSS 21.00%Jun 11, 2025
- Critical9.4A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud StoragCheck if you run itEPSS 0.25%Jun 10, 2025
- Critical9.8Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in thCheck if you run itEPSS 0.73%Jun 10, 2025
- Unknowncellinx nvt_web_server Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.43%Jun 8, 2025
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 28.79%Jun 3, 2025
- Medium6.9SignXML is an implementation of the W3C XML Signature standard in Python.Check if you run itEPSS 0.23%Jun 2, 2025
- Medium6.9SignXML is an implementation of the W3C XML Signature standard in Python.Check if you run itEPSS 0.22%Jun 2, 2025
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.83%Jun 2, 2025
- Critical9.1Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication.Check if you run itEPSS 0.46%May 30, 2025
- Critical9.8Incorrect Privilege Assignment vulnerability in pebas CouponXL couponxl allows Privilege Escalation.This issue affects CouponXL: from n/a through <= 4.5.0.Check if you run itEPSS 0.49%May 23, 2025