Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() Fix a silly bug where an array was used outCheck if you run itEPSS 0.17%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unprepare_from_transfer() tCheck if you run itEPSS 0.15%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_insert_dentry that wasCheck if you run itEPSS 0.23%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPM_CHIP_FLAG_SUSPENDED after the call to tpm_find_get_ops() canCheck if you run itEPSS 0.20%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() soc_dev_attr->revision could be NULCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master driver may receive an IBI from a target devCheck if you run itEPSS 0.22%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpios could be NULL.Check if you run itEPSS 0.22%May 1, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with MPTCP, the kernel paniCheck if you run itEPSS 0.58%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() Lockdep detects the following issue onCheck if you run itEPSS 0.22%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.Check if you run itEPSS 0.22%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-uses associations and tranCheck if you run itEPSS 0.23%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a lock on kvm->srcu when useCheck if you run itEPSS 0.21%May 1, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error After devm_request_irq() faCheck if you run itEPSS 0.22%May 1, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3.Check if you run itEPSS 0.56%May 1, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0.Check if you run itEPSS 0.49%May 1, 2025
- Medium6.4The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' shortcode in all versions up to, and includinCheck if you run itEPSS 0.28%May 1, 2025
- Medium5.3The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 via the 'process_payment_data'Check if you run itEPSS 0.36%May 1, 2025
- Medium6.5The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 due to lack of randomization oCheck if you run itEPSS 0.41%May 1, 2025
- Medium6.4The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded lottie files in all versions up to, and including, 3.5.3 due to insufficient inpuCheck if you run itEPSS 0.24%May 1, 2025
- Medium6.9A vulnerability classified as critical was found in PCMan FTP Server up to 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium6.9A vulnerability classified as critical has been found in PCMan FTP Server up to 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium6.9A vulnerability was found in PCMan FTP Server up to 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium6.9A vulnerability was found in PCMan FTP Server up to 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium6.9A vulnerability was found in PCMan FTP Server up to 2.0.7.Check if you run itEPSS 0.75%May 1, 2025
- Medium5.3A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical.Check if you run itEPSS 0.46%May 1, 2025
Sort