Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image triggered a BUG_ON in ext4_upCheck if you run itEPSS 0.18%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check ifCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mappCheck if you run itEPSS 0.19%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur if the following conditions occur due toCheck if you run itEPSS 0.16%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents.Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent infinite recursion If the buf + offset is not aligned to XE_CAHELINE_BYTES we fallback tCheck if you run itEPSS 0.14%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix NULL dereference in avx512_status() Problem ------- With CONFIG_X86_DEBUG_FPU enabled, reading /proCheck if you run itEPSS 0.14%Sep 4, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Prevent ALIGN() overflow When allocating IOVA the candidate range gets aligned to the target alignment.Check if you run itEPSS 0.17%Sep 4, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi in the below link, whicCheck if you run itEPSS 0.13%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry When UFFDIO_MOVE encounters a migration PMCheck if you run itEPSS 0.16%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit This issue triggers when a userspace program does an ioCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets test-case [1] crashing inCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NCheck if you run itEPSS 0.18%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2c_unregister_device() Before commit df6d7277e552 ("i2c: core: Do not dCheck if you run itEPSS 0.16%Sep 4, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Memory hot remove unmaps and tears down variousCheck if you run itEPSS 0.13%Sep 4, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The event_seq_changed() handler processCheck if you run itEPSS 0.17%Sep 4, 2025
- High7.5The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing.Check if you run itEPSS 1.65%Sep 4, 2025
- Medium6.9Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.Check if you run itEPSS 0.63%Sep 3, 2025
- Low2.9Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients.Check if you run itEPSS 0.71%Sep 3, 2025
- Medium5.9ImpactThe attacker can validate if a user exists by checking the time login returns.Check if you run itEPSS 0.28%Sep 3, 2025
- Medium4.8SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session.Check if you run itEPSS 0.32%Sep 3, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fox by ThemeIsle themeisle-companion allows Store…Check if you run itEPSS 0.21%Sep 3, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Tickera Tickera tickera-event-ticketing-system allows Cross Site Request Forgery.This issue affects Tickera: from n/a through <=Check if you run itEPSS 0.14%Sep 3, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Delicious WP Delicious delicious-recipes allows Stored XSS.This issue affecCheck if you run itEPSS 0.21%Sep 3, 2025
- Medium5.3Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through <Check if you run itEPSS 0.27%Sep 3, 2025
Sort