Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28.Check this weekEPSS 35.00%Apr 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in caalami Advanced Custom Fields: Link Picker Field acf-link-picker-field allowsCheck this weekEPSS 29.00%Apr 15, 2025
- High8.7Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helpCheck if you run itEPSS 0.47%Apr 15, 2025
- High8.7Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helpCheck if you run itEPSS 0.47%Apr 15, 2025
- Unknowneset internet_security Uncontrolled Search Path ElementPatch nowKEVEPSS 2.06%Apr 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock…Check if you run itEPSS 0.25%Mar 12, 2025
- Critical10.0AMI MegaRAC SPx Authentication Bypass by Spoofing VulnerabilityPatch nowKEVEPSS 60.75%Mar 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured corr…Check if you run itEPSS 0.23%Mar 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported following splat [1] Make sure user-…Check if you run itEPSS 0.27%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW Power Hypervisor can possibily all…Check if you run itEPSS 0.23%Feb 27, 2025
- UnknownMicrosoft xbox_gaming_services Improper Link Resolution Before File Access ('Link Following')Patch nowKEVEPSS 0.65%Feb 26, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mac802154: check local interfaces before deleting sdata list syzkaller reported a corrupted list in…Check if you run itEPSS 0.24%Jan 31, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explai…Check if you run itEPSS 0.24%Jan 21, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix soft lockups in fib6_select_path under high next hop churn Soft lockups have been observe…Check if you run itEPSS 0.50%Dec 28, 2024
- UnknownDocuSeal Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDocuSign Print Option Flattened Layer VulnerabilityPatch nowKEVEPSS 0.35%Dec 5, 2024
- UnknownDocumenso Flattened Layer VulnerabilityPatch nowKEVEPSS 0.21%Dec 5, 2024
- UnknownDropBox Sign Flattened Layer VulnerabilityPatch nowKEVEPSS 0.19%Dec 5, 2024
- Unknownchamilo chamilo Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 76.08%Dec 5, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data.Check if you run itEPSS 0.24%Dec 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validat…Check if you run itEPSS 0.26%Nov 7, 2024
- High7.8Linux Kernel Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 3.40%Nov 7, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruction (jump)…Check if you run itEPSS 0.25%Nov 5, 2024
- UnknownApache Solr Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 83.72%Sep 18, 2024
- Unknownchamilo chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 69.67%Sep 18, 2024