Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix circular locking dependency in nci_close_device nci_close_device() flushes rx_wq and…Check if you run itEPSS 0.13%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer smc_rx_splice() a…Check if you run itEPSS 0.18%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated wi…Check if you run itEPSS 0.18%Apr 22, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: ksmbd: do not expire session on binding failure When a multichannel session binding request fails (e.g.Check if you run itEPSS 0.71%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex MEDIA_REQUEST_IOC_REINIT can run…Check if you run itEPSS 0.17%Apr 22, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Validate host controlled val…Check if you run itEPSS 0.17%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false A UAF issu…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with no data integrity guarantees Add a SB_I_NO_DATA_IN…Check if you run itEPSS 0.16%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4_setattr(…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed context One major usage of damon_call() is online…Check if you run itEPSS 0.16%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry When a write subrequest is…Check if you run itEPSS 0.16%Apr 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry Under certain circumstances, all the remaining subrequests…Check if you run itEPSS 0.51%Apr 22, 2026
- Medium6.5Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request.Check if you run itEPSS 0.39%Apr 22, 2026
- High8.1A flaw was found in Red Hat Quay.Check if you run itEPSS 0.38%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 1.06%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 1.06%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 0.80%Apr 22, 2026
- Medium4.3The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium4.3The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026
- Critical9.8The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20.Check if you run itEPSS 0.67%Apr 22, 2026
- Medium4.3The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium4.3The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium4.3The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.23%Apr 22, 2026
- Medium4.3The TextP2P Texting Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.7.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium6.1The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026