Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_nents_for_len The return value of sg_nents_for_len was assignedCheck if you run itEPSS 0.21%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error checks Prevent a kernel warning when netconsole setup fails onCheck if you run itEPSS 0.18%Jan 5, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: hfs: fix potential use after free in hfs_correct_next_unused_CNID() This code calls hfs_bnode_put(node) which drCheck if you run itEPSS 0.14%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show In iommu_mmio_write(), it validates the user-provCheck if you run itEPSS 0.18%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocatCheck if you run itEPSS 0.20%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: backlight: led-bl: Add devlink to supplier LEDs LED Backlight is a consumer of one or multiple LED class devicesCheck if you run itEPSS 0.20%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock blk_mq_{add,del}_queue_tag_set() funCheck if you run itEPSS 0.19%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: staging: most: remove broken i2c driver The MOST I2C driver has been completely broken for five years without anCheck if you run itEPSS 0.21%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm The clock obtained via devm_clk_get_enabled() is automatically mCheck if you run itEPSS 0.18%Jan 5, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: add bounds check in put_user loop for DSP events In the DSP event handling code, a put_userCheck if you run itEPSS 0.17%Jan 5, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: iavf: Implement settime64 with -EOPNOTSUPP ptp_clock_settime() assumes every ptp_clock has implemented settime64Check if you run itEPSS 0.18%Jan 5, 2026
- Medium4.8Action captions in Vaadin accept HTML by default but were not sanitized, potentially allowing Cross-site Scripting (XSS) if caption content is derived from user input.Check if you run itEPSS 0.33%Jan 5, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
- Low2.1A security vulnerability has been detected in milvus up to 2.6.7.Check if you run itEPSS 0.35%Jan 5, 2026
- Critical9.3D-Link dir-600 Missing Authentication for Critical FunctionPatch nowKEVEPSS 0.97%Jan 5, 2026
- Medium5.4DO NOT USE THIS CVE RECORD.Check if you run itEPSS 7.00%Jan 5, 2026
- Medium5.5A vulnerability has been found in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.54%Jan 4, 2026
- Low2.0A vulnerability was identified in CRMEB up to 5.6.1.Check if you run itEPSS 0.38%Jan 4, 2026
- Low2.0A vulnerability was determined in CRMEB up to 5.6.1.Check if you run itEPSS 0.38%Jan 4, 2026
- High8.8Langflow Langflow Missing Authentication for Critical FunctionPatch nowKEVEPSS 33.29%Jan 2, 2026
- UnknownCVE-2025-35002Open the advisoryJan 2, 2026
- UnknownCVE-2025-35001Open the advisoryJan 2, 2026
- UnknownCVE-2025-35000Open the advisoryJan 2, 2026
- UnknownCVE-2025-34999Open the advisoryJan 2, 2026
- UnknownCVE-2025-34998Open the advisoryJan 2, 2026
Sort