Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: ntfs: check overflow when iterating ATTR_RECORDs Kernel iterates over ATTR_RECORDs in mft record in ntfs_attr_fiCheck if you run itEPSS 0.22%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a memory leak We forgot to free new_model_numberCheck if you run itEPSS 0.17%May 1, 2025
- High8.8NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server.Check if you run itEPSS 0.28%May 1, 2025
- High7.8NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions.Check if you run itEPSS 0.22%May 1, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources.Check if you run itEPSS 0.15%May 1, 2025
- Medium6.5Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the ElastCheck if you run itEPSS 0.65%May 1, 2025
- Medium5.4Unrestricted upload of a file with dangerous type in Kibana can lead to arbitrary JavaScript execution in a victim’s browser (XSS) via crafted HTML and JavaScript files.Check if you run itEPSS 0.35%May 1, 2025
- Medium4.3Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient server-side validatioCheck if you run itEPSS 0.34%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x: fix use after free access in at76_disconnect The memory pointed to by priv is freed at the end oCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Purge vif txq in ieee80211_do_stop() After ieee80211_do_stop() SKB from vif's txq could still beCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() devm_kasprintf() returns NULL when memory allocatiCheck if you run itEPSS 0.19%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function checks that rtl_load_file()Check if you run itEPSS 0.20%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() rpl is passed as a pointer to ethtool_cmisCheck if you run itEPSS 0.20%May 1, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCK_RCU_FREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle oCheck if you run itEPSS 0.24%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix nested key length validation in the set() action It's not safe to access nla_len(ovs_key)Check if you run itEPSS 0.22%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path In the for loop used to allocate the loc_arrayCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered Russell King reports that aCheck if you run itEPSS 0.19%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it means that we are the lCheck if you run itEPSS 0.19%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP driver tracks perout anCheck if you run itEPSS 0.19%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check The function dpu_plane_virtual_atomic_check waCheck if you run itEPSS 0.16%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-cros-ec-tunnel and the EC driver are builtCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isofs_fh_to_parent.Check if you run itEPSS 0.21%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing EROFS file-backed mount over v9fs on qemu, ICheck if you run itEPSS 0.17%May 1, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer tCheck if you run itEPSS 1.14%May 1, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_conn_free.Check if you run itEPSS 0.37%May 1, 2025
Sort