Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug.Check if you run itEPSS 0.22%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST At the end of btrfs_load_block_gCheck if you run itEPSS 0.20%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free spaCheck if you run itEPSS 0.20%Oct 30, 2025
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: cifs: parse_dfs_referrals: prevent oob on malformed input Malicious SMB server can send invalid reply to FSCTL_DCheck if you run itEPSS 0.41%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() Return value of a function acpCheck if you run itEPSS 0.20%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_component_manager_init function The __component_match_add function mCheck if you run itEPSS 0.20%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies When adding dependencies with drm_scCheck if you run itEPSS 0.15%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Refactor bind path to use __free() After an bind/unbind cycle, the rndis->notify_req is leCheck if you run itEPSS 0.15%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_acm: Refactor bind path to use __free() After an bind/unbind cycle, the acm->notify_req is left sCheck if you run itEPSS 0.15%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ecm: Refactor bind path to use __free() After an bind/unbind cycle, the ecm->notify_req is left sCheck if you run itEPSS 0.15%Oct 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Refactor bind path to use __free() After an bind/unbind cycle, the ncm->notify_req is left sCheck if you run itEPSS 0.15%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix too early devlink_free() in ixgbe_remove() Since ixgbe_adapter is embedded in devlink, calling devlinCheck if you run itEPSS 0.18%Oct 30, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix recursive locking in RPC handle list access Since commit 305853cce3794 ("ksmbd: Fix race condition inCheck if you run itEPSS 0.28%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxl_feature_info cxl EDAC calls cxl_feature_info() to get the featureCheck if you run itEPSS 0.18%Oct 30, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() The hfsplus_strcasecmp() logic can trigger the issuCheck if you run itEPSS 0.15%Oct 30, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: NFSD: Define a proc_layoutcommit for the FlexFiles layout type Avoid a crash if a pNFS client should happen to sCheck if you run itEPSS 0.50%Oct 30, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds An array of VM binds can potentially evict oCheck if you run itEPSS 0.22%Oct 30, 2025
- Medium6.5NeuVector used a hard-coded cryptographic key embedded in the source code.Check if you run itEPSS 0.27%Oct 30, 2025
- Medium4.6An example dag had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker.Check if you run itEPSS 0.49%Oct 30, 2025
- Critical9.9A vulnerability was identified in NeuVector, where the enforcer used environment variables CLUSTER_RPC_PORT and CLUSTER_LAN_PORT to generate a command to be executed via popen, witCheck if you run itEPSS 0.47%Oct 30, 2025
- High8.6This vulnerability affects NeuVector deployments only when the Report anonymous cluster data option is enabled.Check if you run itEPSS 0.20%Oct 30, 2025
- Medium5.4API users via could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.Check if you run itEPSS 0.52%Oct 30, 2025
- Medium4.6User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.Check if you run itEPSS 0.43%Oct 30, 2025
- Medium6.7A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the defaulCheck if you run itEPSS 0.14%Oct 30, 2025
- Medium5.3The AppPresser – Mobile App Framework plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'myappp_verify' function in all verCheck if you run itEPSS 0.30%Oct 30, 2025
Sort