Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility that init_codecs is invoCheck if you run itEPSS 0.22%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: refactor hfi packet parsing logic words_count denotes the number of words in total payCheck if you run itEPSS 0.22%May 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinity_hint In stmmac_request_irq_multi_msi(), a pointer to the stack varCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix io_req_post_cqe abuse by send bundle [ 114.987980][ T5313] WARNING: CPU: 6 PID: 5313 at io_uriCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() Fix a silly bug where an array was used outsiCheck if you run itEPSS 0.17%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() Fix a silly bug where an array was used outCheck if you run itEPSS 0.17%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unprepare_from_transfer() tCheck if you run itEPSS 0.15%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that wasCheck if you run itEPSS 0.23%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() canCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() soc_dev_attr->revision could be NULCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master driver may receive an IBI from a target devCheck if you run itEPSS 0.22%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpios could be NULL.Check if you run itEPSS 0.22%May 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with MPTCP, the kernel paniCheck if you run itEPSS 0.58%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() Lockdep detects the following issue onCheck if you run itEPSS 0.22%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.Check if you run itEPSS 0.22%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-uses associations and tranCheck if you run itEPSS 0.23%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a lock on kvm->srcu when useCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error After devm_request_irq() faCheck if you run itEPSS 0.22%May 1, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3.Check if you run itEPSS 0.56%May 1, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.Check if you run itEPSS 0.49%May 1, 2025
- Medium6.4The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' shortcode in all versions up to, and includinCheck if you run itEPSS 0.28%May 1, 2025
- Medium5.3The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 via the 'process_payment_data'Check if you run itEPSS 0.36%May 1, 2025
- Medium6.5The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 due to lack of randomization oCheck if you run itEPSS 0.41%May 1, 2025
- Medium6.4The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded lottie files in all versions up to, and including, 3.5.3 due to insufficient inpuCheck if you run itEPSS 0.24%May 1, 2025
- Medium6.9A vulnerability classified as critical was found in PCMan FTP Server up to 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
Sort