Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1In affected versions, vulnerability-lookup did not track or limit failed One-Time Password (OTP) attempts during Two-Factor Authentication (2FA) verification.Check if you run itEPSS 0.41%Dec 8, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Handle lock during peer_id find ath12k_peer_find_by_id() requires that the caller hold the ab->basCheck if you run itEPSS 0.23%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix mapping to non-allocated address [Why] There is an issue mapping non-allocated location ofCheck if you run itEPSS 0.14%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF After a call to console_unlock() inCheck if you run itEPSS 0.14%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: fix UAF in hugetlb_handle_userfault The vma_lock and hugetlb_fault_mutex are dropped before handlinCheck if you run itEPSS 0.15%Dec 8, 2025
- Medium5.3A security flaw has been discovered in D-Link DIR-823X up to 20250416.Patch nowKEVEPSS 3.39%Dec 8, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Define actions for the new time_deleg FATTR4 attributes NFSv4 clients won't send legitimate GETATTR requesCheck if you run itEPSS 0.35%Dec 8, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix crash in nfsd4_read_release() When tracing is enabled, the trace_nfsd_read_done trace point crashes duCheck if you run itEPSS 0.46%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fb_display[i]->mode to NULL when the mode is released Recently, we discovered the following issue thrCheck if you run itEPSS 0.14%Dec 8, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligned()/unaligned() derived the glyph pointerCheck if you run itEPSS 0.14%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode Currently, whenever there is a needCheck if you run itEPSS 0.20%Dec 8, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound When smb2_query_info_compound() retries, a previCheck if you run itEPSS 0.42%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer Fix a race where irq_work can be queued in bpf_ringbuf_comCheck if you run itEPSS 0.14%Dec 8, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once hci_cmd_sync_dequeue_once() does lookup and then cancCheck if you run itEPSS 0.27%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap init calls Commit 4e65bda8273c ("ASoC: wcd934x: fix error hanCheck if you run itEPSS 0.14%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix device use-after-free on unbind A recent change fixed device reference leaks when looking up dCheck if you run itEPSS 0.19%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix epfile null pointer access after ep enable.Check if you run itEPSS 0.20%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget In the __cdnsp_gadget_iCheck if you run itEPSS 0.19%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Since commit af153bb63a33 ("vfs: catch invalid modes in may_openCheck if you run itEPSS 0.19%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: jfs: Verify inode mode when loading from disk The inode mode loaded from corrupted disk can be invalid.Check if you run itEPSS 0.20%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: accel/habanalabs: support mapping cb with vmalloc-backed coherent memory When IOMMU is enabled, dma_alloc_cohereCheck if you run itEPSS 0.19%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw There is race in amdgpu_amdkfd_device_fini_sw and intCheck if you run itEPSS 0.19%Dec 8, 2025
- High8.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_conn_free BUG: KASAN: slab-use-after-free in sco_conn_free net/bluetooth/sco.c:87Check if you run itEPSS 0.24%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered Currently, bcsp_recv() can be called even when the BCSP protocoCheck if you run itEPSS 0.19%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bitsCheck if you run itEPSS 0.15%Dec 8, 2025
Sort