Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixed in cdnsp by cCheck if you run itEPSS 0.16%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: ci_hdrc_imx: fix usbmisc handling usbmisc is an optional device property so it is totally valid fCheck if you run itEPSS 0.19%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: check that event count does not exceed event buffer length The event count is read from regisCheck if you run itEPSS 0.23%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typec_partner_unlink_device can lead to a NULL poCheck if you run itEPSS 0.20%May 8, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: crypto: null - Use spin lock instead of mutex As the null algorithm may be freed in softirq context through af_aCheck if you run itEPSS 0.21%May 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix kmemleak warning for percpu hashmap Vlad Poenaru reported the following kmemleak issue: unreferenced obCheck if you run itEPSS 0.25%May 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in __generic_file_write_iter.Check if you run itEPSS 0.24%May 8, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sound/virtio: Fix cancel_sync warnings on uninitialized work_structs Betty reported hitting the following warninCheck if you run itEPSS 0.20%May 8, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryMay 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pgCheck if you run itEPSS 0.25%May 8, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" wait_event_timeout() will set the state of theCheck if you run itEPSS 0.36%May 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: spi: spi-imx: Add check for spi_imx_setupxfer() Add check for the return value of spi_imx_setupxfer().Check if you run itEPSS 0.21%May 8, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential NULL pointer dereference in dev_uevent() If userspace reads "uevent" device attributeCheck if you run itEPSS 0.21%May 8, 2025
- High7.5The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via theCheck if you run itEPSS 0.73%May 8, 2025
- High7.3The Wolmart | Multi-Vendor Marketplace WooCommerce Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.8.11.Check if you run itEPSS 0.42%May 8, 2025
- Medium4.8smarsh telemessage Use of Hard-coded CredentialsPatch nowKEVEPSS 0.39%May 8, 2025
- Medium4.9TeleMessage TM SGNL Hidden Functionality VulnerabilityPatch nowKEVEPSS 0.45%May 8, 2025
- High7.5Themewinter Eventin Relative Path Traversal VulnerabilityPatch nowKEVEPSS 5.16%May 8, 2025
- High8.8ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.Check if you run itEPSS 0.62%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.Check if you run itEPSS 0.71%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.Check if you run itEPSS 0.71%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.Check if you run itEPSS 0.71%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.Check if you run itEPSS 0.91%May 8, 2025
- Low2.8OpenStack Ironic before 29.0.1 can write unintended files to a target node disk during image handling (if a deployment was performed via the API).Check if you run itEPSS 0.19%May 8, 2025
- Medium5.3An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.Check this weekEPSS 14.31%May 8, 2025
Sort