Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Linux kernel, the following vulnerability has been resolved: page_pool: always add GFP_NOWARN for ATOMIC allocations Driver authors often forget to add GFP_NOWARN for page aCheck if you run itEPSS 0.45%Dec 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The following warning was seen when we try to connect using ssh to the dCheck if you run itEPSS 0.41%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire su_mutex before navigating configs hierarchy There is a race between operations that iterateCheck if you run itEPSS 0.21%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL The AXI crossbar of TH1520 has no proper timeout haCheck if you run itEPSS 0.21%Dec 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same conteCheck if you run itEPSS 0.14%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix invalid probe error return value After DME Link Startup, the error return value is set to tCheck if you run itEPSS 0.17%Dec 16, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to detect potential corrupted nid in free_nid_list As reported, on-disk footer.ino and footer.nid is tCheck if you run itEPSS 0.43%Dec 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: drm/msm: make sure last_fence is always updated Update last_fence in the vm-bind path instead of kernel managedCheck if you run itEPSS 0.13%Dec 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add RDSEED fix for Zen5 There's an issue with RDSEED's 16-bit and 32-bit register output variants oCheck if you run itEPSS 0.14%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause of this issue are: 1.Check if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tty: serial: ip22zilog: Use platform device for probing After commit 84a9582fd203 ("serial: core: Start managingCheck if you run itEPSS 0.22%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump Do not block PCI config accesses through pciCheck if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fix NULL pointer access by aer_info The kzalloc(GFP_KERNEL) may return NULL, so all accesses to aer_infCheck if you run itEPSS 0.17%Dec 16, 2025
- Medium5.4In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSHCheck if you run itEPSS 0.11%Dec 16, 2025
- Medium5.4In JetBrains TeamCity before 2025.11.1 reflected XSS was possible on the storage settings pageCheck if you run itEPSS 0.21%Dec 16, 2025
- Medium6.5In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installation tokenCheck if you run itEPSS 0.21%Dec 16, 2025
- Medium5.4In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tabCheck if you run itEPSS 0.20%Dec 16, 2025
- Medium5.4In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setupCheck if you run itEPSS 4.21%Dec 16, 2025
- Low2.7In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection testCheck if you run itEPSS 0.24%Dec 16, 2025
- Low3.5In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall pageCheck if you run itEPSS 0.19%Dec 16, 2025
- Low2.7In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configurationCheck if you run itEPSS 0.21%Dec 16, 2025
- High8.1In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes.Check if you run itEPSS 0.40%Dec 16, 2025
- Medium5.0HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP addressCheck if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers The and functions contain logic to zero-leCheck if you run itEPSS 0.19%Dec 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs The driver lacks the cleanup of faiCheck if you run itEPSS 0.19%Dec 16, 2025
Sort