Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7.Check if you run itEPSS 0.15%Mar 25, 2026
- High7.5A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain.Check if you run itEPSS 0.73%Mar 25, 2026
- High8.5Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and modificationCheck if you run itEPSS 0.15%Mar 25, 2026
- Medium5.1Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Request Forgery (CSRF) vulnerability which, if exploited, can lead to unauthorized modification of certCheck if you run itEPSS 0.10%Mar 25, 2026
- High8.5cryptodev-linux version 1.14 and prior contain a page reference handling flaw in the get_userbuf function of the /dev/crypto device driver that allows local users to trigger use-afCheck if you run itEPSS 0.18%Mar 25, 2026
- High7.2Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of Special Elements vulnerability which, if exploited, can lead to unauthorized modification oCheck if you run itEPSS 0.22%Mar 25, 2026
- Low3.3When a certificate and its private key are installed in the Windows machine certificate store using Network and Security tool, access rights to the private key are unnecessarily grCheck if you run itEPSS 0.12%Mar 25, 2026
- High7.7From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servin process execution aCheck if you run itEPSS 0.33%Mar 25, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Currently the code attempts to accept requests regCheck if you run itEPSS 0.26%Mar 25, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened.Check if you run itEPSS 0.10%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bridge: cfm: Fix race condition in peer_mep deletion When a peer MEP is being deleted, cancel_delayed_work_sync(Check if you run itEPSS 0.10%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: release flowtable after rcu grace period on error Call synchronize_rcu() after unregisteriCheck if you run itEPSS 0.17%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_CT: drop pending enqueued packets on template removal Templates refer to objects that can go awayCheck if you run itEPSS 0.13%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow The dma_map_sg tracepoint can trigger aCheck if you run itEPSS 0.14%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in ice_set_ringparam() In ice_set_ringparam, tx_rings and xdp_rings are allocated before rxCheck if you run itEPSS 0.12%Mar 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protection fault in squashfs_Check if you run itEPSS 0.13%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() devm_add_action_or_reset() already invokes the aCheck if you run itEPSS 0.13%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL In DQ-QPL mode, gve_tx_clean_pending_pCheck if you run itEPSS 0.13%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clone set on flush only Syzbot with fault injection triggered a failing memory allocationCheck if you run itEPSS 0.20%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() struct ionic_cq_resp resp { __u32 cqid[2]; // offset 0 -Check if you run itEPSS 0.12%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing struct bpf_plt contains a u64 targetCheck if you run itEPSS 0.18%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them In commit 2ff5baa9b527 ("HID: appleir: FixCheck if you run itEPSS 0.12%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter,Check if you run itEPSS 0.13%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARN_ON in tracing_buffers_mmap_close When a process forks, the child process copies the parent's VCheck if you run itEPSS 0.12%Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: fix divide by zero in the offload path Offloading ETS requires computing each class' WRR weight:Check if you run itEPSS 0.13%Mar 25, 2026
Sort