Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix a kernel trace [1] caused by releasing an HWS action of a locaCheck if you run itEPSS 0.14%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() This code calls kfree_rcu(new_node, rcu) and thCheck if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI syzbot managed to trigger the following race: T1 T2 futex_wait_rCheck if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Use correct exit on failure from futex_hash_allocate_default() copy_process() uses the wrong error exit pCheck if you run itEPSS 0.14%Oct 15, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2_compound_op() In smb2_compound_op(), the loop that processes eachCheck if you run itEPSS 0.47%Oct 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() When config osnoise cpus by write() syscall, tCheck if you run itEPSS 0.18%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The parameter provided by the virtual function (VF) is assigned directlyCheck if you run itEPSS 0.15%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when itCheck if you run itEPSS 0.15%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iteratinCheck if you run itEPSS 0.15%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB derefeCheck if you run itEPSS 0.15%Oct 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40E_VF_STATE_ACTIVE is not the only state in which VCheck if you run itEPSS 0.15%Oct 15, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request.Check if you run itEPSS 0.15%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabilities in fbcon_do_set_font() wheCheck if you run itEPSS 0.17%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors fput() doesn't actually call file_operations release() synchCheck if you run itEPSS 0.11%Oct 15, 2025
- High8.6A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10.Check if you run itEPSS 0.53%Oct 15, 2025
- High7.5The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'tax_query' parameter in all versions up to, and including, 1.1 due to insufficient escapiCheck if you run itEPSS 0.43%Oct 15, 2025
- Medium6.5This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0.Check if you run itEPSS 0.21%Oct 15, 2025
- Critical9.3F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.30%Oct 15, 2025
- Medium6.4The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading shortcode in all versions up to, and including, 8.6.1.Check if you run itEPSS 0.21%Oct 15, 2025
- Medium6.4The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module in all versions up to, and including, 8.6.1.Check if you run itEPSS 0.21%Oct 15, 2025
- High8.5RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.5RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- High8.5RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.17%Oct 15, 2025
- Medium5.5The BlindMatrix e-Commerce WordPress plugin before 3.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any auCheck if you run itEPSS 0.26%Oct 15, 2025
- Medium6.8A vulnerability exists in certain Dahua embedded products.Check if you run itEPSS 0.46%Oct 15, 2025
Sort