Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the behavior originates from a documentation-published Active Response example script.Open the advisoryOct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function (/var/ipfire/header.pCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Medium5.1IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript codeCheck if you run itEPSS 0.48%Oct 28, 2025
- Critical9.8Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls.Check if you run itEPSS 0.34%Oct 28, 2025
- High7.8An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc.Check if you run itEPSS 0.34%Oct 28, 2025
- High7.8A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc.Check if you run itEPSS 0.34%Oct 28, 2025
- Medium5.0A flaw was found in Red Hat Openshift AI Service.Check if you run itEPSS 0.25%Oct 28, 2025
- Medium6.0A flaw was found in Keycloak.Check if you run itEPSS 0.14%Oct 28, 2025
- High7.1hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()Check if you run itEPSS 0.19%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() Cast nr_pages to unsigned long to avoid overflow when handlingCheck if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets.Check if you run itEPSS 0.21%Oct 28, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The ns_bpf_qdisc selftest triggers a kernel panic: UnaCheck if you run itEPSS 0.15%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warning on the following sock_addr progCheck if you run itEPSS 0.24%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio->index from pgoff_t to loff_t tCheck if you run itEPSS 0.20%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq() Starting with commit dd26c1a23fd5 ("PCI: rCheck if you run itEPSS 0.18%Oct 28, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: use dst_dev_net_rcu() Replace three dst_dev() with a lockdep enabled helper.Check if you run itEPSS 0.49%Oct 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possible UAF.Check if you run itEPSS 0.46%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/msm: Do not validate SSPP when it is not ready Current code will validate current plane and previous plane tCheck if you run itEPSS 0.18%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fanotify: Validate the return value of mnt_ns_from_dentry() before dereferencing The function do_fanotify_mark()Check if you run itEPSS 0.18%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC Currently gsm_queue() processes incoming frames and when openCheck if you run itEPSS 0.20%Oct 28, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commit 2a934fdb01db ("media:Check if you run itEPSS 0.24%Oct 28, 2025
Sort