Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tracker We were overwriting the surface's dirty tracker here causiCheck if you run itEPSS 0.13%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommu_sva_unbind_device() domain->mm->iommu_mm can be freed by iommu_domain_free(): iommCheck if you run itEPSS 0.13%Apr 3, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon in compoundCheck if you run itEPSS 0.34%Apr 3, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in durable v2 replay of active file handles parse_durable_handle_context() unconditionCheck if you run itEPSS 0.30%Apr 3, 2026
- Medium5.1A weakness has been identified in Casdoor 2.356.0.Check if you run itEPSS 0.31%Apr 3, 2026
- Medium5.1A security flaw has been discovered in Casdoor 2.356.0.Check if you run itEPSS 0.19%Apr 3, 2026
- Medium4.3** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to validate file ownership when serving uploaded files.Check if you run itEPSS 0.23%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() The logicvc_drm_config_parse() functioCheck if you run itEPSS 0.12%Apr 3, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix ID register initialization for non-protected pKVM guests In protected mode, the hypervisor maintCheck if you run itEPSS 0.12%Apr 3, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Validate command buffer payload count The count field in the command header is used to determineCheck if you run itEPSS 0.12%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: free pages on error in btrfs_uring_read_extent() In this function the 'pages' object is never freed in thCheck if you run itEPSS 0.12%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Commit 31a7a0bbeb00 ("dpaa2-switch: aCheck if you run itEPSS 0.13%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/configfs: Free ctx_restore_mid_bb in release ctx_restore_mid_bb memory is allocated in wa_bb_store(), butCheck if you run itEPSS 0.12%Apr 3, 2026
- High8.1** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reordering categories.Check if you run itEPSS 0.31%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: Fix a locking bug Make sure that wl->mutex is locked before it is unlocked.Check if you run itEPSS 0.10%Apr 3, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rds_tcp_tune syzbot reported a circular locking dependency in rds_tcCheck if you run itEPSS 0.19%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/reg_sr: Fix leak on xa_store failure Free the newly allocated entry when xa_store() fails to avoid a memoCheck if you run itEPSS 0.12%Apr 3, 2026
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions Based on Mailboxes report.Check if you run itEPSS 0.55%Apr 3, 2026
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Non-Owner Mailbox Permission report.Check if you run itEPSS 0.55%Apr 3, 2026
- Medium5.3A vulnerability was identified in Casdoor 2.356.0.Check if you run itEPSS 0.34%Apr 3, 2026
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Folder Message Count and Size report.Check if you run itEPSS 0.54%Apr 3, 2026
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Public Folder Client Permissions report.Check if you run itEPSS 0.55%Apr 3, 2026
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Equipment Mailbox Details report.Check if you run itEPSS 0.55%Apr 3, 2026
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Mails Exchanged Between Users report.Check if you run itEPSS 0.55%Apr 3, 2026
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report.Check if you run itEPSS 0.55%Apr 3, 2026
Sort