Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set ubuf->sg = NULL if the creation of sg table fails When userspace tries to map the dmabuf and if forCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix running_req for internal abort commands Disabling the remote phy for a SATA disk causes a hangCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skb_clone() syzbot got a crash [1] in skb_clone(), caused by a bug in hsrCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report [1] with no reproducer hints at a bug in ip6_gre tCheck if you run itEPSS 0.25%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ext2: Add sanity checks for group and filesystem size Add sanity check that filesystem size does not exceed theCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr KASAN reported this Bug: [17619.659757] BUG: KASAN: gCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcb_probe() When probe hook function failed in mcb_probe(), it doesn't put thCheck if you run itEPSS 0.28%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 A bad bug in clang's implementation of -fCheck if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, meta buffers could be leaked.Check if you run itEPSS 0.24%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing put_device in mport_cdev_open When kfifo_alloc fails, the refcount of chdev->dev iCheck if you run itEPSS 0.28%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: xhci: dbc: Fix memory leak in xhci_alloc_dbc() If DbC is already in use, then the allocated memory for the xhci_Check if you run itEPSS 0.24%Dec 30, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2_lock() argv needs to be free when setup_async_work fails or when the curCheck if you run itEPSS 0.39%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: s5p-mfc: Clear workbit to handle error condition During error on CLOSE_INSTANCE command, ctx_work_bits waCheck if you run itEPSS 0.21%Dec 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use get_device and put_device in the open and close functions to make sure theCheck if you run itEPSS 0.14%Dec 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, butCheck if you run itEPSS 0.18%Dec 30, 2025
- Medium6.9A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424.Check if you run itEPSS 0.45%Dec 30, 2025
- Medium5.3A vulnerability was determined in aizuda snail-job up to 1.7.0 on macOS.Check if you run itEPSS 0.29%Dec 30, 2025
- High7.2The Lucky Wheel for WooCommerce – Spin a Sale plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.1.13.Check if you run itEPSS 0.64%Dec 30, 2025
- Medium5.3Missing Authorization vulnerability in wpdesk ShopMagic shopmagic-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopMagCheck if you run itEPSS 0.22%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-liteCheck if you run itEPSS 0.15%Dec 30, 2025
- Medium4.3Missing Authorization vulnerability in Kraft Plugins Demo Importer Plus demo-importer-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectCheck if you run itEPSS 0.18%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in autolistings Auto Listings auto-listings allows Stored XSS.This issue affectsCheck if you run itEPSS 0.15%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vidish Combo Offers WooCommerce woo-combo-offers allows DOM-Based XSS.This issCheck if you run itEPSS 0.16%Dec 30, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP Local File InclusionCheck if you run itEPSS 0.39%Dec 30, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in A WP Life Blog Filter blog-filter allows DOM-Based XSS.This issue affects BlogCheck if you run itEPSS 0.15%Dec 30, 2025
Sort