Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq Commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->Check if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jbd2: fix potential use-after-free in jbd2_fc_wait_bufs In 'jbd2_fc_wait_bufs' use 'bh' after put buffer head reCheck if you run itEPSS 0.16%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS UBSAN complains about array-index-out-of-bounds: [ 1.98070Check if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix double release compute pasid If kfd_process_device_init_vm returns failure after vm is convertedCheck if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, butCheck if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconf_mod_rs_timer(), reference idev dependCheck if you run itEPSS 0.17%Sep 15, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: skbuff: Fix a race between coalescing and releasing SKBs Commit 1effe8ca4e34 ("skbuff: fix coalescing for page_pCheck if you run itEPSS 0.27%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: arm64/sme: Set new vector length before reallocating As part of fixing the allocation of the buffer for SVE statCheck if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HACheck if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port->pm on port specific driver unbind When we unbind a serial port hardware specific 8250Check if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix race in sock_map_free() sock_map_free() calls release_sock(sk) without owning a reference on tCheck if you run itEPSS 0.12%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: # cd /sys/kernel/tracingCheck if you run itEPSS 0.17%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: igb: Do not free q_vector unless new one was allocated Avoid potential use-after-free condition under memory preCheck if you run itEPSS 0.17%Sep 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromCheck if you run itEPSS 0.37%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contexts Restore the SIMD usability check that waCheck if you run itEPSS 0.25%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl() The UIC completion interrupt may be disaCheck if you run itEPSS 0.15%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contexts Restore the SIMD usability check that wasCheck if you run itEPSS 0.25%Sep 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This commit addresses a rarely observed endpointCheck if you run itEPSS 0.15%Sep 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() If we find an unexpected generation foCheck if you run itEPSS 0.16%Sep 15, 2025
- High7.6Mattermost versions 10.10.x <= 10.10.1, 10.5.x <= 10.5.9, 10.9.x <= 10.9.4 fail to validate the redirect_to parameter, allowing an attacker to craft a malicious link that, once a uCheck if you run itEPSS 0.18%Sep 15, 2025
- Medium6.1Mattermost versions 10.5.x <= 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to malicious sites via crafted OAuth login URLsCheck if you run itEPSS 0.17%Sep 15, 2025
- Medium4.3Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to properly validate cache keys for link metadata which allowsCheck if you run itEPSS 0.15%Sep 15, 2025
- Medium6.5Mattermost versions 10.10.x <= 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters tCheck if you run itEPSS 0.26%Sep 15, 2025
- Medium4.8A vulnerability was identified in IbuyuCMS up to 2.6.3.Check if you run itEPSS 0.27%Sep 15, 2025
- Medium6.3A vulnerability was found in newbee-mall 1.0.Check if you run itEPSS 0.45%Sep 15, 2025
Sort