Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix NULL pointer dereference in object->file At present, the object->file has the NULL…Check if you run itEPSS 0.23%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: udmabuf: change folios array from kmalloc to kvmalloc When PAGE_SIZE 4096, MAX_PAGE_ORDER 10, 64bit…Check if you run itEPSS 0.25%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: virtiofs: use pages instead of pointer for kernel direct IO When trying to insert a 10MB kernel mod…Check if you run itEPSS 0.27%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent NULL dereference in nfsd4_process_cb_update() @ses is initialized to NULL.Check if you run itEPSS 0.73%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix receive ring space parameters when XDP is active The MTU setting at the time an XDP mu…Check if you run itEPSS 0.63%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe This commit address…Check if you run itEPSS 0.26%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: io_uring: check for overflows in io_pin_pages WARNING: CPU: 0 PID: 5834 at io_uring/memmap.c:144 io…Check if you run itEPSS 0.28%Dec 27, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: block: fix uaf for flush rq while iterating tags blk_mq_clear_flush_rq_mapping() is not called duri…Check if you run itEPSS 0.24%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfs/blocklayout: Don't attempt unregister for invalid block device Since commit d869da91cccb ("nfs/…Check if you run itEPSS 0.64%Dec 27, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix bfqq uaf in bfq_limit_depth() Set new allocated bfqq to bic or remove freed bfqq fr…Check if you run itEPSS 0.26%Dec 27, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: sh: intc: Fix use-after-free bug in register_intc_controller() In the error handling for this funct…Check if you run itEPSS 0.26%Dec 27, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ordering of qlen adjustment Changes to sch->q.qlen around qdisc_tree_reduce_backlog…Check if you run itEPSS 0.27%Dec 27, 2024
- Medium6.9DrayTek Vigor Routers OS Command Injection VulnerabilityPatch nowKEVEPSS 98.16%Dec 27, 2024
- High8.7Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityPatch nowKEVEPSS 29.12%Dec 27, 2024
- Low3.6shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistic…Check if you run itEPSS 0.43%Dec 26, 2024
- Medium6.7In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled o…Check if you run itEPSS 0.20%Dec 24, 2024
- High7.1In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entries In the case of the directory size is greater t…Check if you run itEPSS 0.25%Dec 24, 2024
- Critical9.8Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 8.97%Dec 20, 2024
- High7.8astro astro Storage of File with Sensitive Data Under Web RootPatch nowKEVEPSS 1.54%Dec 19, 2024
- High8.8Digiever DS-2105 Pro Missing Authorization VulnerabilityPatch nowKEVEPSS 96.92%Dec 19, 2024
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
- High7.2BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityPatch nowKEVEPSS 32.22%Dec 18, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE This aligned BR/EDR JUST_WORKS method…Check if you run itEPSS 0.42%Dec 17, 2024
- Critical9.8BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityPatch nowKEVEPSS 87.26%Dec 16, 2024
- High7.4A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.Check if you run itEPSS 0.84%Dec 12, 2024
Sort