Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC The referenced commit introduced eCheck if you run itEPSS 0.23%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx In __blk_mq_update_nr_hw_queues()Check if you run itEPSS 0.22%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III Anthony Yznaga tracked down thCheck if you run itEPSS 0.17%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall compatibility Yinhao et al.Check if you run itEPSS 0.17%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access error When running perf_fuzzer on PTL, sometimes the below "uncCheck if you run itEPSS 0.20%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping When an invalid value is passed via quirk option, curCheck if you run itEPSS 0.23%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock Prevent USB runtime PM (autosuspend) for AX88Check if you run itEPSS 0.22%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4_mb_init() In ext4_mb_init(), ext4_mb_avg_fragment_size_destroy() may be cCheck if you run itEPSS 0.21%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod Since commit f7b705c238d1 ("scsi: pm80xx: Set phy_attachCheck if you run itEPSS 0.16%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Fix array underflow in pci_endpoint_test_ioctl() Commit eefb83790a0d ("misc: pci_endpoiCheck if you run itEPSS 0.15%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup The kthread_run() function returns errorCheck if you run itEPSS 0.22%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() During mpt3sas_transport_port_remove(), meCheck if you run itEPSS 0.23%Nov 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E The ADSP firmware on X1E has separate firmware binaries forCheck if you run itEPSS 0.24%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara The referenced commit introduced exceCheck if you run itEPSS 0.17%Nov 12, 2025
- Medium4.3Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.Check if you run itEPSS 0.21%Nov 12, 2025
- High7.3Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directoCheck if you run itEPSS 0.52%Nov 12, 2025
- Medium6.5Reflected cross-site scripting vulnerability in Apache OFBiz.Check if you run itEPSS 0.83%Nov 12, 2025
- High7.3Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz.Check if you run itEPSS 1.74%Nov 12, 2025
- High7.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.27%Nov 12, 2025
- Medium5.3Apache OpenOffice documents can contain links.Check if you run itEPSS 0.49%Nov 12, 2025
- Medium4.3An out-of-bounds Write vulnerability in Apache OpenOffice could allow an attacker to craft a document that would crash the program, or otherwise corrupt other memory areas.Check if you run itEPSS 0.55%Nov 12, 2025
- High7.5Apache OpenOffice documents can contain links.Check if you run itEPSS 1.45%Nov 12, 2025
- High7.5Apache OpenOffice documents can contain links to other files.Check if you run itEPSS 1.25%Nov 12, 2025
- High8.1Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources".Check if you run itEPSS 1.26%Nov 12, 2025
- Medium6.5Apache OpenOffice documents can contain links.Check if you run itEPSS 0.59%Nov 12, 2025
Sort