Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-ForceCheck if you run itEPSS 0.50%Oct 14, 2026
- High7.8drm/ttm: fix swapped-out resources never leaving their bulk_move rangeCheck if you run itEPSS 0.15%Oct 6, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asus_wm…Check if you run itEPSS 0.16%Sep 17, 2026
- Critical9.8ZDI-26-657: ASUS Control Center Express Agent Missing Authentication Remote Code Execution VulnerabilityCheck if you run itEPSS 0.20%Sep 10, 2026
- UnknownASUS asmb9-ikvm_firmware Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 1.81%Jun 22, 2026
- High7.3Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized rea…Check if you run itEPSS 0.11%May 29, 2026
- High7.3An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute…Check if you run itEPSS 0.12%May 29, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/display/dp_mst: Add protection against 0 vcpi When releasing a timeslot there is a slight chanc…Check if you run itEPSS 0.16%May 27, 2026
- UnknownAsusWRT 'handle_request' Function Authentication BypassPatch nowKEVEPSS 87.26%May 17, 2026
- Low2.0An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpa…Check if you run itEPSS 0.12%May 8, 2026
- Medium6.8An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash (BSOD) via a read size that exceeds…Check if you run itEPSS 0.14%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: enable basic endpoint checking pegasus_probe() fills URBs with hardcoded endpoin…Check if you run itEPSS 0.16%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: asus: avoid memory leak in asus_report_fixup() The asus_report_fixup() function was returning…Check if you run itEPSS 0.16%Apr 22, 2026
- Critical9.4A command injection vulnerability was found in the PPTP VPN Clients on the ADM.Check if you run itEPSS 2.08%Apr 20, 2026
- High8.6A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM.Check if you run itEPSS 0.76%Apr 20, 2026
- Medium5.4A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Admin…Check if you run itEPSS 0.07%Apr 16, 2026
- Medium5.4An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of r…Check if you run itEPSS 0.14%Apr 16, 2026
- Critical9.3Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by ex…Check if you run itEPSS 1.42%Apr 5, 2026
- High8.6An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary sys…Check if you run itEPSS 0.90%Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: validate USB endpoints The pegasus driver should validate that the device it is…Check if you run itEPSS 0.13%Mar 25, 2026
- Medium5.4An Insufficient Integrity Verification vulnerability in the ASUS ROG peripheral driver installation process allows privilege escalation to SYSTEM.Check if you run itEPSS 0.12%Mar 12, 2026
- Medium6.9An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver.Check if you run itEPSS 0.10%Mar 12, 2026
- Medium6.8An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver.Check if you run itEPSS 0.09%Mar 12, 2026
- UnknownASUS asuswrt Missing AuthorizationPatch nowKEVEPSS 85.16%Mar 11, 2026
- Critical9.2The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings.Check if you run itEPSS 0.79%Feb 25, 2026
53 records · page 1 of 3
PreviousNext