Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module.Check this weekEPSS 28.00%Apr 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type Syzbot has reported the following BUG: kernel BUG at fs/inode.Check if you run itEPSS 0.29%Apr 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' diCheck if you run itEPSS 0.31%Apr 18, 2025
- High7.5An access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to retain access to system resources due to improper session invalidation and stale tokenCheck this weekEPSS 82.00%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning[1]: ip netns add ns1 ip neCheck this weekEPSS 20.00%Apr 16, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() If track_pfn_copy() fails, we already addCheck this weekEPSS 21.00%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-free with the following cCheck this weekEPSS 21.00%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() We must serialize calls to sctp_udp_sock_stop() and sctp_uCheck this weekEPSS 30.00%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA_TUNNEL_KEY_OPTS_GENEVECheck this weekEPSS 32.00%Apr 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct geneve_opt uses 5 bit length for each single option, which meCheck this weekEPSS 25.00%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion When BIOS neglects to assign bus numbers to PCCheck this weekEPSS 25.00%Apr 16, 2025
- High8.7A vulnerability was found in Tenda W12 3.0.0.5.Check if you run itEPSS 7.39%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the following crash: =======Check this weekEPSS 21.00%Apr 16, 2025
- High7.5A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead to privilege escalation in specific scenarios.This issue affCheck this weekEPSS 61.00%Apr 16, 2025
- Critical9.8Apple Multiple Products Arbitrary Read and Write VulnerabilityPatch nowKEVEPSS 13.97%Apr 16, 2025
- Critical9.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 20.90%Apr 16, 2025
- High8.7Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helpCheck if you run itEPSS 0.47%Apr 15, 2025
- High8.3Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field.Check if you run itEPSS 7.28%Apr 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NET…Check if you run itEPSS 0.20%Apr 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: llc: do not use skb_get() before dev_queue_xmit() syzbot is able to crash hosts [1], using llc and…Check if you run itEPSS 0.22%Apr 1, 2025
- High7.5can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivateCheck if you run itEPSS 0.58%Mar 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in th…Check if you run itEPSS 0.22%Mar 27, 2025
- UnknownPorto Porto Theme for WordPress Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 1.00%Mar 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().Check if you run itEPSS 0.25%Mar 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock…Check if you run itEPSS 0.25%Mar 12, 2025