Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input…Check if you run itEPSS 0.40%Dec 6, 2025
- Medium4.3HedgeDoc is an open source, real-time, collaborative, markdown notes application.Check if you run itEPSS 0.10%Dec 5, 2025
- High7.2The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…Open the advisoryDec 4, 2025
- Medium6.1The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and i…Open the advisoryDec 2, 2025
- Medium4.4In GPU pdma, there is a possible information disclosure due to a missing bounds check.Open the advisoryDec 2, 2025
- Medium4.4In GPU pdma, there is a possible memory corruption due to a missing permission check.Open the advisoryDec 2, 2025
- High7.8In display, there is a possible out of bounds read due to a missing bounds check.Open the advisoryDec 2, 2025
- High7.8In mmdvfs, there is a possible out of bounds write due to a missing bounds check.Open the advisoryDec 2, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().Check if you run itEPSS 0.58%Nov 12, 2025
- High8.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.03%Nov 12, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpat…Check if you run itEPSS 0.18%Oct 28, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: arm64: csum: Fix OoB access in IP checksum code for negative lengths Although commit c2c24edb1d9c (…Check if you run itEPSS 0.15%Oct 22, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tcp: fix skb_copy_ubufs() vs BIG TCP David Ahern reported crashes in skb_copy_ubufs() caused by TCP…Check if you run itEPSS 0.15%Oct 7, 2025
- Critical9.8Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 5.39%Sep 17, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix race in sock_map_free() sock_map_free() calls release_sock(sk) without owning a r…Check if you run itEPSS 0.12%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE On Google gs101, the number of UTP transf…Open the advisorySep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry When UFFDIO_MOVE encounters a…Open the advisorySep 4, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Gary Illyes Google XML News Sitemap plugin gn-xml-sitemap allows Stored XSS.This issue affects Google XML News Sitem…Open the advisoryAug 28, 2025
- Medium5.4The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to…Open the advisoryAug 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Disable migration in nf_hook_run_bpf().Check if you run itEPSS 0.17%Aug 22, 2025
- Medium6.5Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics advanced-google-universal-analytics allows Exploiting Incorrectly Configured Access Control SecCheck this weekEPSS 31.00%Aug 14, 2025
- Medium6.5Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-Check this weekEPSS 25.00%Aug 13, 2025
- Medium6.9A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Check this weekEPSS 22.00%Aug 12, 2025
- High8.6A safe mode bypass vulnerability in the method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a speciallCheck this weekEPSS 12.00%Aug 11, 2025
- Medium4.3Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTCheck this weekEPSS 24.00%Aug 7, 2025