Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fbdev: rivafb: fix divide error in nv3_arb() A userspace program can trigger the RIVA NV3 arbitrati…Check if you run itEPSS 0.12%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted…Check if you run itEPSS 0.12%Mar 18, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvme_pr_read_keys() nvme_pr_read_keys() takes num_keys from userspac…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium5.4A cross-origin issue in the Navigation API was addressed with improved input validation.Check if you run itEPSS 0.36%Mar 17, 2026
- Critical9.0ConnectWise ScreenConnect Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.29%Mar 17, 2026
- High7.5HCL AION is affected by a vulnerability related to the handling of upload size limits.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium5.5A security vulnerability has been detected in D-Link DIR-823G 1.0.2B05.Check if you run itEPSS 1.90%Mar 16, 2026
- Medium6.9Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/archivos/usuarios/[ID]/[username]/thumb_AAxAA.jpg' (translated…Check if you run itEPSS 0.43%Mar 16, 2026
- High8.7Insecure Direct Object Reference (IDOR) vulnerability in Campus Educativa specifically at the endpoint '/administracion/admin_usuarios.cgi?filtro_estado=T&wAccion=list…Check if you run itEPSS 0.43%Mar 16, 2026
- Critical9.9Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.62%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.16%Mar 16, 2026
- High7.8in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write.Check if you run itEPSS 0.18%Mar 16, 2026
- Low3.3in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input.Check if you run itEPSS 0.14%Mar 16, 2026
- High7.0in OpenHarmony v5.1.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through using incompatible type.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium6.8ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofin…Check if you run itEPSS 0.15%Mar 16, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial characters v…Check if you run itEPSS 0.57%Mar 16, 2026
- Medium6.9ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources.Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.3ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into v…Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.1ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by injecting m…Check if you run itEPSS 0.25%Mar 16, 2026
- Critical9.3ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager application.Check if you run itEPSS 0.79%Mar 16, 2026
- Unknownlinux, linux-aws, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-Open the advisoryMar 16, 2026
- High7.7OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.22%Mar 12, 2026
- Low1.9A vulnerability has been found in jarikomppa soloud up to 20200207.Check if you run itEPSS 0.17%Mar 12, 2026
- High8.8The issue was addressed with improved memory handling.Check if you run itEPSS 0.92%Mar 12, 2026
- Medium5.3Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Check if you run itEPSS 0.26%Mar 11, 2026