Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nci_init_rCheck if you run itEPSS 0.31%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference There is a critical race cCheck if you run itEPSS 0.23%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign-extend struct ops return values properly The ns_bpf_qdisc selftest triggers a kernel panic:Check if you run itEPSS 0.15%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.60Check if you run itEPSS 0.38%Oct 28, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray manages RPC handles withiCheck if you run itEPSS 0.31%Oct 28, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and HLT fastpaths in SVM's VCheck if you run itEPSS 0.18%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fbdev: simplefb: Fix use after free in simplefb_detach_genpds() The pm_domain cleanup can not be devres managedCheck if you run itEPSS 0.21%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cause an early return withCheck if you run itEPSS 0.21%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak Struct ff_effect_compat is embedded tCheck if you run itEPSS 0.23%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() When platform firmware supplies error information toCheck if you run itEPSS 0.20%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() pru_rproc_set_ctable() accesseCheck if you run itEPSS 0.21%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release The fields dma_chan_tx and dma_chan_Check if you run itEPSS 0.21%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_helper(), fix incorrect error handling for a call to iov_iter_extCheck if you run itEPSS 0.21%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specifCheck if you run itEPSS 0.22%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in case of failuCheck if you run itEPSS 0.22%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when trying to expand its proc-Check if you run itEPSS 0.15%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASAN issue as below: general protection faultCheck if you run itEPSS 0.16%Oct 28, 2025
- High7.9In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emulation of instruction tCheck if you run itEPSS 0.17%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzbot reported below: ------------[ cut hereCheck if you run itEPSS 0.14%Oct 28, 2025
- High7.5The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the parameter in all versions up to, and including, 1.3.7.1 dCheck if you run itEPSS 0.35%Oct 28, 2025
- Low3.7A flaw was found in Keycloak.Check if you run itEPSS 0.41%Oct 28, 2025
- Medium5.5Uncontrolled Resource ConsumptionPatch nowKEVEPSS 0.28%Oct 28, 2025
- High7.5An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive information via the "pre-resource" option in bes-web.xml.Check if you run itEPSS 0.36%Oct 28, 2025
- High7.5Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive information via a crafted GET request.Check if you run itEPSS 0.32%Oct 28, 2025
- Critical9.8zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates.Check if you run itEPSS 0.53%Oct 28, 2025
Sort