Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix race of buffer access at PCM OSS layer The PCM OSS layer tries to clear the buffer with the silenCheck if you run itEPSS 0.15%Jun 18, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix timeout on deleted connection NOPIN response timer may expire on a deleted connection aCheck if you run itEPSS 0.46%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on device_shutdown() Hongyu reported a hang on kexec in a VM.Check if you run itEPSS 0.25%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: copy_verifier_state() should copy 'loop_entry' field The bpf_verifier_state.loop_entry state should be copiCheck if you run itEPSS 0.24%Jun 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock ...Check if you run itEPSS 0.17%Jun 18, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done Syzbot reported a slab-use-after-free with theCheck if you run itEPSS 0.55%Jun 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null sk_state_change queue->state_change is set as part of nvmet_tcp_set_queue_sock(),Check if you run itEPSS 0.57%Jun 18, 2025
- Critical9.3Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 99.97%Jun 17, 2025
- Low2.5A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.Check if you run itEPSS 0.32%Jun 16, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- Medium6.6TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key'sCheck if you run itEPSS 0.26%Jun 10, 2025
- High8.8Microsoft Windows SMB Client Improper Access Control VulnerabilityPatch nowKEVEPSS 82.70%Jun 10, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityPatch nowKEVEPSS 87.02%Jun 10, 2025
- Medium6.5HAX CMS PHP allows users to manage their microsite universe with a PHP backend.Check if you run itEPSS 0.52%Jun 9, 2025
- Critical9.8Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabCheck if you run itEPSS 0.43%Jun 9, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN BCM) can send a sequence of CANCheck if you run itEPSS 0.27%Jun 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report tCheck if you run itEPSS 0.52%Jun 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC cCheck if you run itEPSS 0.23%Jun 6, 2025
- Medium4.6IGEL OS Use of a Key Past its Expiration Date VulnerabilityPatch nowKEVEPSS 4.93%Jun 5, 2025
- High8.2dataease dataease Authentication Bypass by SpoofingPatch nowKEVEPSS 49.98%Jun 3, 2025
- Medium5.2A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connectCheck if you run itEPSS 0.53%Jun 2, 2025
- Critical9.0Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 96.91%Jun 2, 2025
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 7.82%Jun 2, 2025
- High7.5Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.14%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 0.46%Jun 2, 2025
Sort