Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0The email module, specifically the "BytesGenerator" class, didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when anCheck if you run itEPSS 0.57%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: ublk: fix use-after-free in ublk_partition_scan_work A race condition exists between the async partition scan woCheck if you run itEPSS 0.13%Jan 23, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpf_prog_test_run_xdp() syzbot is reporting unregister_netdevice: waiting for sCheck if you run itEPSS 0.14%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unlesCheck if you run itEPSS 0.14%Jan 23, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: libceph: return the handler error from mon_handle_auth_done() Currently any error from ceph_auth_handle_reply_doCheck if you run itEPSS 0.45%Jan 23, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: libceph: make free_choose_arg_map() resilient to partial allocation free_choose_arg_map() may dereference a NULLCheck if you run itEPSS 0.47%Jan 23, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted suchCheck if you run itEPSS 0.40%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlock_filesystem If we are trying to unlock the filesystem via an adminisCheck if you run itEPSS 0.14%Jan 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not change skb->head arp_create() is the only dev_hard_header() callerCheck if you run itEPSS 0.14%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy syzbot reported a crash in tc_act_in_hw()Check if you run itEPSS 0.12%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev->srcu If two drivers were calling gpiochip_add_data_with_key(), one may beCheck if you run itEPSS 0.10%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interfCheck if you run itEPSS 0.14%Jan 23, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payloadCheck if you run itEPSS 0.41%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: do not write to msg_get_inq in callee NULL pointer dereference fix.Check if you run itEPSS 0.12%Jan 23, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix crash when adding interface under a lag Commit 15faa1f67ab4 ("lan966x: Fix crash when addCheck if you run itEPSS 0.14%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdeCheck if you run itEPSS 0.14%Jan 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing to v4_end_grace can race with server shutdown and result in memorCheck if you run itEPSS 0.15%Jan 23, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in skb_segment_list for GRO packets When skb_segment_list() is called during packet forwardCheck if you run itEPSS 0.14%Jan 23, 2026
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches.Check if you run itEPSS 0.14%Jan 23, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: dm-verity: disable recursive forward error correction There are two problems with the recursive correction: 1.Check if you run itEPSS 0.47%Jan 23, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfs_get_or_create_delayed_node() Previously, btrfs_get_or_create_delayed_Check if you run itEPSS 0.25%Jan 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: ensure worker is torn down When an IRQ worker is running, unplugging the device would cause a crashCheck if you run itEPSS 0.16%Jan 23, 2026
- Medium4.3Missing Authorization vulnerability in Syed Balkhi Sugar Calendar (Lite) sugar-calendar-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.22%Jan 23, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in DevsBlink EduBlink Core edublink-core allows PHP Local FileCheck if you run itEPSS 0.36%Jan 23, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Ultimate Reviews ultimate-reviews allows Exploiting Incorrectly Configured Access Control Security LeveCheck if you run itEPSS 0.24%Jan 23, 2026
Sort