Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA_TUNNEL_KEY_OPTS_GENEVECheck if you run itEPSS 0.32%Apr 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct geneve_opt uses 5 bit length for each single option, which meCheck if you run itEPSS 0.25%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs On the following path, flush_tlb_range() can beCheck if you run itEPSS 0.24%Apr 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a warning in to_nfit_bus_uuid(): "oCheck if you run itEPSS 0.22%Apr 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: put dl_stid if fail to queue dl_recall Before calling nfsd4_run_cb to queue dl_recall to the callback_wq,Check if you run itEPSS 0.58%Apr 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode ath11k_hal_srng_* should be used with srng->lCheck if you run itEPSS 0.25%Apr 16, 2025
- Critical10.0In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nf_sk_lookup_slow_v4 does the conntrack lookup for IPv4 packeCheck if you run itEPSS 0.47%Apr 16, 2025
- Critical9.8Apple Multiple Products Arbitrary Read and Write VulnerabilityPatch nowKEVEPSS 13.86%Apr 16, 2025
- Critical9.8Apple Multiple Products Memory Corruption VulnerabilityPatch nowKEVEPSS 20.90%Apr 16, 2025
- Medium6.9An integer overflow can be triggered in SQLite’s function.Check if you run itEPSS 1.25%Apr 14, 2025
- Medium5.5In SQLite 3.49.0 before 3.49.1, certain argument values to sqlite3_db_config (in the C-language API) can cause a denial of service (application crash).Check if you run itEPSS 0.22%Apr 10, 2025
- Low3.8In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.Check if you run itEPSS 0.20%Apr 10, 2025
- Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityPatch nowKEVEPSS 87.76%Apr 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/migrate: fix shmem xarray update during migration A shmem folio can be either in page cache or i…Check if you run itEPSS 0.21%Apr 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state There are several problems with th…Check if you run itEPSS 0.21%Apr 8, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free VulnerabilityPatch nowKEVEPSS 19.25%Apr 8, 2025
- High7.5In SQLite 3.44.0 through 3.49.0 before 3.49.1, the concat_ws() SQL function can cause memory to be written beyond the end of a malloc-allocated buffer.Check if you run itEPSS 0.52%Apr 7, 2025
- Low3.7A flaw was found in GLib.Check if you run itEPSS 0.65%Apr 7, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- Critical9.8booster booster_for_woocommerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.70%Apr 4, 2025
- Medium4.8A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic.Check if you run itEPSS 0.28%Apr 4, 2025
- Critical9.8Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityPatch nowKEVEPSS 94.34%Apr 3, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().Check if you run itEPSS 0.21%Apr 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: proc: fix UAF in proc_get_inode() Fix race between rmmod and /proc/XXX's inode instantiation.Check if you run itEPSS 0.23%Apr 3, 2025
- Critical9.8Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.98%Apr 3, 2025
Sort