Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in AH output Fix field-spanning memcpy warnings in ah6_output() andCheck if you run itEPSS 0.21%Dec 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ceph: fix multifs mds auth caps issue The mds auth caps check should also validate the fsname along with the assCheck if you run itEPSS 0.16%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Do not dereference NULL pointer in plane reset The plane state in __drm_gem_reset_shadow_plane() canCheck if you run itEPSS 0.21%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix KASAN global-out-of-bounds warning When running "perf mem record" command on CWF, the belowCheck if you run itEPSS 0.20%Dec 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: riscv: stacktrace: Disable KASAN checks for non-current tasks Unwinding the stack of a task other than current,Check if you run itEPSS 0.15%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/smc: fix general protection fault in __smc_diag_dump The syzbot report a crash: Oops: general protection fauCheck if you run itEPSS 0.20%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix DMA-API usage Use DMA-API dma_map_single() call for getting the DMA address of the transfCheck if you run itEPSS 0.14%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: sysfs: check visibility before changing group attribute ownership Since commit 0c17270f9b92 ("net: sysfs: ImplemCheck if you run itEPSS 0.22%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: increase max link count and fix link->enc NULL pointer access [why] 1.) dc->links[MAX_LINKS] arCheck if you run itEPSS 0.15%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: arm64: mte: Do not warn if the page is already tagged in copy_highpage() The arm64 copy_highpage() assumes thatCheck if you run itEPSS 0.20%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: platform/mellanox: mlxbf-pmc: add sysfs_attr_init() to count_clock init The lock-related debug logic (CONFIG_LOCCheck if you run itEPSS 0.21%Dec 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ XDP programs can change the layout ofCheck if you run itEPSS 0.55%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplus_bmap_alloc hfsplus_bmap_alloc can trigger a crash if a record offset or lCheck if you run itEPSS 0.15%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: slab: Avoid race on slab->obj_exts in alloc_slab_obj_exts If two competing threads enter alloc_slab_obj_exts() aCheck if you run itEPSS 0.20%Dec 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock After applying the workaround for err050089, the LS1028A platforCheck if you run itEPSS 0.53%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() Fix incorrect use of PTR_ERR_OR_ZERO()Check if you run itEPSS 0.21%Dec 16, 2025
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityPatch nowKEVEPSS 90.19%Dec 16, 2025
- Medium5.3Missing Authorization vulnerability in CatFolders CatFolders catfolders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CatFolders: fromCheck if you run itEPSS 0.26%Dec 16, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in freshchat Freshchat freshchat allows Cross Site Request Forgery.This issue affects Freshchat: from n/a through <= 2.3.4.Check if you run itEPSS 0.13%Dec 16, 2025
- Low2.7Insertion of Sensitive Information Into Sent Data vulnerability in Shinetheme Traveler Option Tree custom-option-tree allows Retrieve Embedded Sensitive Data.This issue affects TraCheck if you run itEPSS 0.27%Dec 16, 2025
- Medium6.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.32%Dec 16, 2025
- Medium6.9Misskey is an open source, federated social media platform.Check if you run itEPSS 0.34%Dec 15, 2025
- High7.1Misskey is an open source, federated social media platform.Check if you run itEPSS 0.31%Dec 15, 2025
- High7.4FreshRSS is a self-hosted RSS feed aggregator.Check if you run itEPSS 0.70%Dec 15, 2025
- High8.5NanoMQ is a messaging broker/bus for IoT Edge & SDV.Check if you run itEPSS 0.33%Dec 15, 2025
Sort