Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: cancel mesh send timer when hdev removed mesh_send_done timer is not canceled when hdev is remoCheck if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF There is a KASAN: slab-use-after-free read inCheck if you run itEPSS 0.14%Dec 6, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path Bluetooth 6lowpan.c netdev has header_ops, so it mCheck if you run itEPSS 0.28%Dec 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto syzbot reported a possible shift-out-of-Check if you run itEPSS 0.22%Dec 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: sched: act_connmark: initialize struct tc_ife to fix kernel leak In tcf_connmark_dump(), the variable 'opt'Check if you run itEPSS 0.20%Dec 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak Fix a KMSAN kernel-infoleak detectedCheck if you run itEPSS 0.22%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE This data originates from userspace and iCheck if you run itEPSS 0.24%Dec 6, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping buffers CPU-uncached The shmem layer zeroes out the new pages usiCheck if you run itEPSS 0.14%Dec 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd In snd_usb_create_streams(), for UACheck if you run itEPSS 0.19%Dec 6, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: NFSD: free copynotify stateid in nfs4_free_ol_stateid() Typically copynotify stateid is freed either when parentCheck if you run itEPSS 0.43%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: fix use-after-free race in fault handler When a page fault occurs in a secret memory file createdCheck if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is erased from subdir rbtree through rb_erase(), but not set the nodeCheck if you run itEPSS 0.46%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix potential UAF issue for VMA readahead Since commit 78524b05f1a3 ("mm, swap: avoid redundant swap dCheck if you run itEPSS 0.14%Dec 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transfCheck if you run itEPSS 0.18%Dec 6, 2025
- High7.6A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data and access logs belonging to other Apigee customer organizaCheck if you run itEPSS 0.27%Dec 6, 2025
- Medium5.4The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14.Check if you run itEPSS 0.22%Dec 6, 2025
- High7.2The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input sanitizationCheck if you run itEPSS 0.40%Dec 6, 2025
- Medium6.1The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to insufficient inCheck if you run itEPSS 0.21%Dec 6, 2025
- Medium4.3HedgeDoc is an open source, real-time, collaborative, markdown notes application.Check if you run itEPSS 0.10%Dec 5, 2025
- Medium4.3Nextcloud Twofactor WebAuthn is the WebAuthn Two-Factor Provider for Nextcloud.Check if you run itEPSS 0.28%Dec 5, 2025
- Medium4.3Nextcloud talk is a video & audio conferencing app for Nextcloud.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.4Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing.Check if you run itEPSS 0.25%Dec 5, 2025
- Low2.7Nextcloud Desktop is the desktop sync client for Nextcloud.Check if you run itEPSS 0.30%Dec 5, 2025
- Medium4.3Nextcloud Groupfolders provides admin-configured folders shared by everyone in a group or team.Check if you run itEPSS 0.28%Dec 5, 2025
- Low2.7The Nextcloud Approval app allows approval or disapproval of files in the sidebar.Check if you run itEPSS 0.31%Dec 5, 2025
Sort