Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of set_ftrace_filter and seCheck if you run itEPSS 0.18%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing: Limit access to parser->buffer when trace_get_user failed When the length of the string written to set_Check if you run itEPSS 0.18%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923f3a2b48bd ("x86/resctrl: Query LLC mCheck if you run itEPSS 0.18%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer The data->block[0] variable comes from user.Check if you run itEPSS 0.16%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().Check if you run itEPSS 0.16%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL If metric table address is not allocated, accessCheck if you run itEPSS 0.16%Sep 5, 2025
- High7.8net/sched: Fix backlog accounting in qdisc_dequeue_internalCheck if you run itEPSS 0.21%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provideCheck if you run itEPSS 0.14%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in ppp_fill_forward_path ppp_fill_forward_path() has two race conditions: 1.Check if you run itEPSS 0.31%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uninitialised variable Fix smb3_init_transform_rq() to initialise buffer to NULL before caCheck if you run itEPSS 0.38%Sep 5, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exceCheck if you run itEPSS 0.17%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown() isCheck if you run itEPSS 0.17%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULCheck if you run itEPSS 0.46%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/mm: Do not map lowcore with identity mapping Since the identity mapping is pinned to address zero the lowcoCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patches to add a WARN() when replacingCheck if you run itEPSS 0.18%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vm_bind_ioctl double free bug If the argument check during an array bind fails, the bind_ops are freCheck if you run itEPSS 0.16%Sep 5, 2025
- High8.6On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attackeCheck if you run itEPSS 0.23%Sep 5, 2025
- High7.6Some payload elements of the messages sent between two stations in a networking architecture are not properly checked on the receiving station allowing an attacker to execute unautCheck if you run itEPSS 0.16%Sep 5, 2025
- Medium6.0The sequence of packets received by a Networking server are not correctly checked.Check if you run itEPSS 0.27%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in fullworks Quick Paypal Payments quick-paypal-payments allows Cross Site Request Forgery.This issue affects Quick Paypal Payments:Check if you run itEPSS 0.13%Sep 5, 2025
- Medium6.5Missing Authorization vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affeCheck if you run itEPSS 0.23%Sep 5, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.59%Sep 5, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kamleshyadav Miraculous miraculous allows Blind SQL Injection.This issue affecCheck if you run itEPSS 0.31%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gourl GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership gourl-bitcoiCheck if you run itEPSS 0.18%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in ericzane Floating Window Music Player floating-window-music-player allows Stored XSS.This issue affects Floating Window Music PlaCheck if you run itEPSS 0.12%Sep 5, 2025
Sort