Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: kTLS, Fix incorrect page refcounting The kTLS tx handling code is using a mix of get_pag…Check if you run itEPSS 0.55%Dec 4, 2024
- Medium6.5In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode mo…Check if you run itEPSS 0.24%Dec 4, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: sync_linked_regs() must preserve subreg_def Range propagation must not affect subreg_def marks…Check if you run itEPSS 0.23%Dec 4, 2024
- High7.8Linux Kernel Out-of-Bounds Access VulnerabilityPatch nowKEVEPSS 4.12%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Arbitrary OS Command ExecutionPatch nowKEVEPSS 0.57%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Admin Account Arbitrary OS Command ExecutionPatch nowKEVEPSS 0.90%Dec 4, 2024
- UnknownUD-LT1 and UD-LT1/EX Firmware Guest Account Credential DisclosurePatch nowKEVEPSS 0.47%Dec 4, 2024
- UnknownKubePi JWT Token Login Bypass VulnerabilityPatch nowKEVEPSS 8.39%Dec 3, 2024
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: net: fix data-races around sk->sk_forward_alloc Syzkaller reported this warning: ------------[ cut…Check if you run itEPSS 0.59%Dec 2, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust Additional active subflows - i.e.Check if you run itEPSS 0.53%Dec 2, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number of Zen4 client SoCs advertise…Check if you run itEPSS 0.28%Dec 2, 2024
- Unknownfujitsu esprimo_d556\/2_firmware Cleartext Storage of Sensitive InformationPatch nowKEVEPSS 1.84%Nov 29, 2024
- Critical9.8Microsoft Partner Center Improper Access Control VulnerabilityPatch nowKEVEPSS 1.30%Nov 26, 2024
- Critical9.8ProjectSend Improper Authentication VulnerabilityPatch nowKEVEPSS 91.85%Nov 26, 2024
- Unknowncleantalk spam_protection\,_antispam\,_firewall Improper Check or Handling of Exceptional ConditionsPatch nowKEVEPSS 3.71%Nov 26, 2024
- UnknownTP-Link Router AX50 Authenticated Remote Code Execution VulnerabilityPatch nowKEVEPSS 34.63%Nov 26, 2024
- Unknownecoa ecs_router_controller-ecs_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.43%Nov 26, 2024
- Unknownzzzcms zzzphp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 6.64%Nov 26, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->ia_mode, at…Check if you run itEPSS 0.25%Nov 25, 2024
- High7.1Linux Kernel Out-of-Bounds Read VulnerabilityPatch nowKEVEPSS 1.35%Nov 25, 2024
- UnknownZyxel zld Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.32%Nov 25, 2024
- Unknowntychesoftwares product_input_fields_for_woocommerce Path Traversal: '.../...//'Patch nowKEVEPSS 0.76%Nov 25, 2024
- High7.2PaperCut papercut_ng Exposed Dangerous Method or FunctionPatch nowKEVEPSS 1.76%Nov 22, 2024
- Medium5.3A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that.Check if you run itEPSS 0.73%Nov 21, 2024
- Medium5.3A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries.Check if you run itEPSS 0.62%Nov 21, 2024
Sort