Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report tCheck if you run itEPSS 0.52%Jun 6, 2025
- Medium4.9A flaw was found in Samba.Check if you run itEPSS 0.75%Jun 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC cCheck if you run itEPSS 0.23%Jun 6, 2025
- Medium4.0An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23.Check if you run itEPSS 0.75%Jun 5, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.97%Jun 1, 2025
- Medium5.9ALAS-2025-1981 (medium): perlCheck if you run itEPSS 0.50%May 30, 2025
- Medium6.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as tCheck if you run itEPSS 0.41%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash underCheck if you run itEPSS 0.34%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck if you run itEPSS 0.38%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() If bio_add_folio() fails (because it is fuCheck if you run itEPSS 0.18%May 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attributeCheck if you run itEPSS 0.25%May 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macrosCheck if you run itEPSS 0.17%May 29, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce886a60207 ("KVM: arm64: Plumb the pCheck if you run itEPSS 0.16%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_or_create_module_kobject()', an inCheck if you run itEPSS 0.21%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all penCheck if you run itEPSS 0.21%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe The spin lock tx_handling_spinlockCheck if you run itEPSS 0.18%May 29, 2025
- High7.3Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write.Check if you run itEPSS 0.22%May 28, 2025
- Medium6.5Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.40%May 27, 2025
- Medium5.4Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.32%May 27, 2025
- High8.8Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.46%May 27, 2025
- UnknownCVE-2025-32914 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.77%May 27, 2025
- UnknownCVE-2025-32913 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.84%May 27, 2025
- UnknownCVE-2025-32907 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.70%May 27, 2025
- UnknownCVE-2025-32906 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.97%May 27, 2025
- High7.3A flaw was found in GIMP when processing XCF image files.Check if you run itEPSS 0.25%May 27, 2025
Sort