Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex MEDIA_REQUEST_IOC_REINIT can run…Check if you run itEPSS 0.17%Apr 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled val…Check if you run itEPSS 0.17%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false A UAF issu…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB_I_NO_DATA_IN…Check if you run itEPSS 0.16%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4_setattr(…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed context One major usage of damon_call() is online…Check if you run itEPSS 0.16%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry When a write subrequest is…Check if you run itEPSS 0.16%Apr 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry Under certain circumstances, all the remaining subrequests…Check if you run itEPSS 0.51%Apr 22, 2026
- Medium6.5Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request.Check if you run itEPSS 0.39%Apr 22, 2026
- High8.1A flaw was found in Red Hat Quay.Check if you run itEPSS 0.38%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 1.06%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 1.06%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 0.80%Apr 22, 2026
- Medium4.3The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium4.3The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026
- Critical9.8The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20.Check if you run itEPSS 0.67%Apr 22, 2026
- Medium4.3The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium4.3The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium4.3The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.23%Apr 22, 2026
- Medium4.3The TextP2P Texting Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.7.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium6.1The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026
- Medium4.3The TP Restore Categories And Taxonomies plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.34%Apr 22, 2026
- Medium4.3The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium4.3The Call To Action Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.3.Check if you run itEPSS 0.23%Apr 22, 2026
- Medium5.3The CalJ plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.Check if you run itEPSS 0.42%Apr 22, 2026