Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownIn the Linux kernel, the following vulnerability has been resolved: cifs: fix memory leak in smb3_fs_context_parse_param error path Add proper cleanup of ctx->source a…Check if you run itEPSS 0.20%Dec 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be required…Check if you run itEPSS 0.71%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext When alloc_slab…Check if you run itEPSS 0.20%Dec 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ceph: fix multifs mds auth caps issue The mds auth caps check should also validate the fsname along…Check if you run itEPSS 0.16%Dec 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other t…Check if you run itEPSS 0.15%Dec 16, 2025
- High7.1Misskey is an open source, federated social media platform.Check if you run itEPSS 0.31%Dec 16, 2025
- Unknowneclipse business_intelligence_and_reporting_tools Improper Input ValidationPatch nowKEVEPSS 57.98%Dec 16, 2025
- Medium6.9In the Eclipse OMR compiler component, since release 0.7.0, an optimization enabled for Eclipse OpenJ9 consumers of OMR on Z processors incorrectly handles NUL (0x00)…Check if you run itEPSS 0.30%Dec 15, 2025
- High7.5The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint.Check if you run itEPSS 0.26%Dec 13, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.Check if you run itEPSS 0.19%Dec 12, 2025
- Medium5.3quic-go is an implementation of the QUIC protocol in Go.Check if you run itEPSS 0.36%Dec 11, 2025
- Medium6.7An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.14%Dec 11, 2025
- Medium5.0Jenkins Git client Plugin 6.4.0 and earlier does not not correctly escape the path to the workspace directory as part of an argument in a temporary shell script genera…Check if you run itEPSS 0.21%Dec 10, 2025
- High7.5Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenti…Check if you run itEPSS 0.56%Dec 10, 2025
- High8.5An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges.Check if you run itEPSS 0.12%Dec 10, 2025
- High8.8The Video Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in version <= 5.0.4.Check if you run itEPSS 0.45%Dec 10, 2025
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.81%Dec 9, 2025
- Critical9.1Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.56%Dec 9, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to inject arbitrary web…Open the advisoryDec 9, 2025
- Critical9.3The ruby-saml library implements the client side of an SAML authorization.Check if you run itEPSS 0.24%Dec 9, 2025
- Critical9.3The ruby-saml library is for implementing the client side of a SAML authorization.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium6.51Panel is an open-source, web-based control panel for Linux server management.Check if you run itEPSS 0.25%Dec 9, 2025
- High7.51Panel is an open-source, web-based control panel for Linux server management.Check if you run itEPSS 0.47%Dec 9, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_close_cached_fid() find_or_create_cached_dir() could grab a…Check if you run itEPSS 0.46%Dec 9, 2025
- High8.8Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session.Open the advisoryDec 8, 2025