Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BCheck this weekEPSS 20.00%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is loaded, the XDP callback adds new TCheck if you run itEPSS 0.20%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_OP_REMOVE_ADV_MONITOR to not useCheck if you run itEPSS 0.20%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex to protect from concurrent accessCheck if you run itEPSS 0.18%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot reports: BUG: KASAN: slab-use-afteCheck this weekEPSS 19.00%Jul 3, 2025
- Medium6.1Incorrect access control in Ullu (Android version v2.9.929 and IOS version v2.8.0) allows attackers to bypass parental pin feature via unspecified vectors.Check this weekEPSS 15.00%Jul 1, 2025
- UnknownFortinet fortiswitchmanager Relative Path TraversalPatch nowKEVEPSS 0.93%Jun 29, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects AiosCheck this weekEPSS 15.00%Jun 27, 2025
- Medium6.0iOS Simulator MCP Server (ios-simulator-mcp) is a Model Context Protocol (MCP) server for interacting with iOS simulators.Check this weekEPSS 64.00%Jun 26, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prismtechstudios Modern Footnotes modern-footnotes allows Stored XSS.This issuCheck this weekEPSS 23.00%Jun 20, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG: KASAN: slab-outCheck this weekEPSS 24.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 Don't BUG/WARN on interrupt injection due to GICheck this weekEPSS 27.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10_remove_disk when running the lvm test lvconvert-rCheck this weekEPSS 24.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: powerpc/pci: Fix get_phb_number() locking The recent change to get_phb_number() causes a DEBUG_ATOMIC_SLEEP warnCheck this weekEPSS 14.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set the DMA mask for the udmabuf device (v2) If the DMA mask is not set explicitly, the following warniCheck this weekEPSS 24.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix kernel BUG in purge_effective_progs Syzkaller reported a triggered kernel BUG as follows: -----Check this weekEPSS 28.00%Jun 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null sk_state_change queue->state_change is set as part of nvmet_tcp_set_queue_sock(),Check if you run itEPSS 0.56%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after commit 9dd05df840Check this weekEPSS 21.00%Jun 18, 2025
- High7.4Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debugCheck if you run itEPSS 9.00%Jun 16, 2025
- Medium4.8An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other usCheck this weekEPSS 27.00%Jun 16, 2025
- Medium4.3The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium6.1A flaw was found in GIMP.Check if you run itEPSS 0.59%Jun 13, 2025
- Medium4.2Apple Multiple Products Unspecified VulnerabilityPatch nowKEVEPSS 1.19%Jun 11, 2025
- High8.2An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software.Check if you run itEPSS 0.43%Jun 10, 2025
- Medium5.6A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 throuCheck if you run itEPSS 0.45%Jun 10, 2025