Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: orangefs: fix xattr related buffer overflow...Check if you run itEPSS 0.16%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN p9_read_work() doesn't set Rworksched and doesn't do schedCheck if you run itEPSS 0.17%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds Add bounds checking to prevent writes pastCheck if you run itEPSS 0.14%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: ensure no dirty metadata is written back for an fs with errors [BUG] During development of a minor featurCheck if you run itEPSS 0.14%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy fileio is active vb2_ioctl_remove_bufs() call manipulates queueCheck if you run itEPSS 0.14%Dec 8, 2025
- High7.6In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: validate skb length for unknown CC opcode In hci_cmd_complete_evt(), if the command compleCheck if you run itEPSS 0.27%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: gve: Implement gettimex64 with -EOPNOTSUPP gve implemented a ptp_clock for sole use of do_aux_work at this time.Check if you run itEPSS 0.18%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: gve: Implement settime64 with -EOPNOTSUPP ptp_clock_settime() assumes every ptp_clock has implemented settime64(Check if you run itEPSS 0.18%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix use-after-free due to MST port state bypass syzbot reported[1] a use-after-free when deleting aCheck if you run itEPSS 0.16%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: platform/x86: int3472: Fix double free of GPIO device during unregister regulator_unregister() already frees theCheck if you run itEPSS 0.18%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fscrypt: fix left shift underflow when inode->i_blkbits > PAGE_SHIFT When simulating an nvme device on qemu withCheck if you run itEPSS 0.21%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() In the parse_adv_monitor_pattern() function, theCheck if you run itEPSS 0.20%Dec 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: iommufd: Don't overflow during division for dirty tracking If pgshift is 63 then BITS_PER_TYPE(*bitmap->bitmap)Check if you run itEPSS 0.20%Dec 8, 2025
- High8.4In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix received length check in big packets Since commit 4959aebba8c0 ("virtio-net: use mtu size as bufCheck if you run itEPSS 0.17%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring: fix regbuf vector size truncation There is a report of io_estimate_bvec_size() truncating the calculatCheck if you run itEPSS 0.14%Dec 8, 2025
- Medium6.9A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15.Check if you run itEPSS 0.30%Dec 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: avoid data corruption on cq descriptor number Since commit 30f241fcf52a ("xsk: Fix immature cq descriptor pCheck if you run itEPSS 0.14%Dec 8, 2025
- Medium6.9A vulnerability was determined in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.38%Dec 8, 2025
- Critical9.1A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematicCheck if you run itEPSS 0.22%Dec 8, 2025
- Medium6.5Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution (RCE).Check if you run itEPSS 0.55%Dec 8, 2025
- Medium4.3A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to execute a path traversal.Check if you run itEPSS 0.21%Dec 8, 2025
- Medium5.4Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily modify or delete attachments made by other users.Check if you run itEPSS 0.18%Dec 8, 2025
- Medium4.3Incorrect access control in usememos memos v0.25.2 allows attackers with low-level privileges to arbitrarily delete reactions made to other users' Memos.Check if you run itEPSS 0.20%Dec 8, 2025
- Critical9.1NUT-14 allows cashu tokens to be created with a preimage hash.Check if you run itEPSS 0.42%Dec 8, 2025
- High7.2Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute appended shell expressions as root, enabling file disclosure, dCheck if you run itEPSS 6.69%Dec 8, 2025
Sort