Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Handle lock during peer_id find ath12k_peer_find_by_id() requires that the caller hol…Check if you run itEPSS 0.23%Dec 8, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Define actions for the new time_deleg FATTR4 attributes NFSv4 clients won't send legitimate G…Check if you run itEPSS 0.35%Dec 8, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound When smb2_query_info_compound() ret…Check if you run itEPSS 0.42%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent…Check if you run itEPSS 0.14%Dec 8, 2025
- Medium5.5A vulnerability was detected in Verysync 微力同步 2.21.3.Check if you run itEPSS 0.46%Dec 7, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has header…Check if you run itEPSS 0.28%Dec 6, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4_free_ol_stateid() Typically copynotify stateid is freed eithe…Check if you run itEPSS 0.43%Dec 6, 2025
- Medium6.1The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to in…Check if you run itEPSS 0.21%Dec 6, 2025
- Low2.7Nextcloud Desktop is the desktop sync client for Nextcloud.Check if you run itEPSS 0.30%Dec 5, 2025
- Medium4.3The WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up…Check if you run itEPSS 0.12%Dec 5, 2025
- Medium6.1The Nouri.sh Newsletter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.0.1.3 due to ins…Check if you run itEPSS 0.25%Dec 5, 2025
- Medium4.3The Torod – The smart shipping and delivery portal for e-shops and retailers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an…Check if you run itEPSS 0.15%Dec 5, 2025
- Medium6.1The WP-SOS-Donate Donation Sidebar Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.9.2 d…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.1.1 due to i…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The dream gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Dec 5, 2025
- Medium6.1The CoSign Single Signon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.3.1 due to insu…Check if you run itEPSS 0.25%Dec 5, 2025
- Medium4.3The Quantic Social Image Hover plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8.Check if you run itEPSS 0.15%Dec 5, 2025
- Medium4.3The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7.Check if you run itEPSS 0.16%Dec 5, 2025
- Medium4.3The Image Optimizer by wps.sk plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.15%Dec 5, 2025
- High8.8The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery i…Check if you run itEPSS 0.33%Dec 5, 2025
- High8.7The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account.Open the advisoryDec 4, 2025
- Medium6.9Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthenticated attackers to execute arbitrary code in…Open the advisoryDec 4, 2025
- High7.4A weakness has been identified in H3C Magic B0 up to 100R002.Check if you run itEPSS 0.81%Dec 4, 2025
- Medium6.1The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.8 due to insufficient inp…Check if you run itEPSS 0.25%Dec 4, 2025