Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: client: allocate crypto onCheck if you run itEPSS 0.47%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if a related deferred sigCheck if you run itEPSS 0.25%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devices During platform_device_register, wrongly using struct device pci_deCheck if you run itEPSS 0.24%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling statistics Driver uses monitor destination rings for extended staCheck if you run itEPSS 0.24%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past theCheck if you run itEPSS 0.22%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unprepare_from_transfer() tCheck if you run itEPSS 0.15%May 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with MPTCP, the kernel paniCheck if you run itEPSS 0.58%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.Check if you run itEPSS 0.22%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-uses associations and tranCheck if you run itEPSS 0.23%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a lock on kvm->srcu when useCheck if you run itEPSS 0.21%May 1, 2025
- Medium6.3TOTOLINK ca600-poe_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.94%May 1, 2025
- UnknownCVE-2018-13372Open the advisoryApr 29, 2025
- UnknownCVE-2017-7740Open the advisoryApr 29, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.85%Apr 27, 2025
- High8.1ConnectWise ScreenConnect Improper Authentication VulnerabilityPatch nowKEVEPSS 3.60%Apr 25, 2025
- Medium5.4A vulnerability was found in mod_proxy_cluster.Check if you run itEPSS 0.38%Apr 23, 2025
- Critical9.3Commvault Command Center Path Traversal VulnerabilityPatch nowKEVEPSS 97.60%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQ_NOWAIT raid10_handle_discard should wait barriCheck if you run itEPSS 0.28%Apr 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() The pynfs DELEG8 test fails when run agaCheck if you run itEPSS 0.62%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sfc: fix NULL dereferences in ef100_process_design_param() Since cited commit, ef100_probe_main() and hence alsoCheck if you run itEPSS 0.32%Apr 18, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix OOB read when checking dotdot dir Mounting a corrupted filesystem with directory which contains '.' diCheck if you run itEPSS 0.31%Apr 18, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025
- Critical9.8Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.36%Apr 17, 2025
- High8.1Nullsoft Scriptable Install System (NSIS) before 3.11 on Windows allows local users to escalate privileges to SYSTEM during an installation, because the temporary plugins directoryCheck if you run itEPSS 0.33%Apr 17, 2025
Sort