Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improperCheck if you run itEPSS 0.40%May 2, 2025
- Medium6.0IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SCheck if you run itEPSS 0.28%May 1, 2025
- Medium6.5IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client conneCheck if you run itEPSS 0.39%May 1, 2025
- Critical9.3KUNBUS Revolution Pi OS Bookworm 01/2025 is vulnerable because authentication is not configured by default for the Node-RED server.Check if you run itEPSS 0.77%May 1, 2025
- High7.7Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.Check if you run itEPSS 0.49%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/smc: Fix possible leaked pernet namespace in smc_init() In smc_init(), register_pernet_subsys(&smc_net_stat_Check if you run itEPSS 0.21%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() Change num_ghes from int to unsigned int, preventinCheck if you run itEPSS 0.22%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() During the error recovery sequence, the rtnl_lock is not helCheck if you run itEPSS 0.21%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix deadlock in nilfs_count_free_blocks() A semaphore deadlock can occur if nilfs_get_block() detects meCheck if you run itEPSS 0.17%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mctp i2c: don't count unused / invalid keys for flow release We're currently hitting the WARN_ON in mctp_i2c_floCheck if you run itEPSS 0.17%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() syzbot reported a deadlock in lock_system_sleeCheck if you run itEPSS 0.15%May 1, 2025
- High8.6Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.75%Apr 30, 2025
- Medium6.5vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 0.52%Apr 30, 2025
- Medium6.1IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting.Check if you run itEPSS 0.26%Apr 29, 2025
- Low1.0DPA countermeasures are unavailable for ECDH key agreement and EdDSA signing operations on Curve25519 and Curve448 on all Series 2 modules and SoCs due to a lack of hardware and soCheck if you run itEPSS 0.22%Apr 29, 2025
- High8.8Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior.Check if you run itEPSS 0.66%Apr 29, 2025
- High8.8In Zimbra Collaboration (ZCS) 9.0 through 10.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the GraphQL endpoint (/service/extension/graphql) of Zimbra webmail dueCheck if you run itEPSS 0.31%Apr 29, 2025
- Medium5.1A vulnerability has been found in AMTT Hotel Broadband Operation System 1.0 and classified as critical.Check this weekEPSS 14.82%Apr 27, 2025
- High7.7There is a code-related vulnerability in the GoldenDB database product.Check if you run itEPSS 0.40%Apr 27, 2025
- Medium4.9NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).Check if you run itEPSS 0.50%Apr 27, 2025
- High7.3z2d is a pure Zig 2D graphics library.Check if you run itEPSS 0.18%Apr 25, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpoperations Arrival arrival allows PHP Local File InclusioCheck if you run itEPSS 0.69%Apr 24, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in wpoperations Opstore opstore allows PHP Local File InclusioCheck if you run itEPSS 0.75%Apr 24, 2025
- Medium6.5Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operaCheck if you run itEPSS 0.40%Apr 24, 2025
- High8.8Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability.Check if you run itEPSS 0.54%Apr 23, 2025