Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ensure safe access to master conntrack Holding reference on the expectation i…Check if you run itEPSS 0.10%May 6, 2026
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New test case fails unexp…Check if you run itEPSS 0.37%May 6, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called…Check if you run itEPSS 0.35%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfrm: account XFRMA_IF_ID in aevent size calculation xfrm_get_ae() allocates the reply skb with xfr…Check if you run itEPSS 0.15%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix memory leak in airoha_qdma_rx_process() If an error occurs on the subsequents buff…Check if you run itEPSS 0.12%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bridge: guard local VLAN-0 FDB helpers against NULL vlan group When CONFIG_BRIDGE_VLAN_FILTERING is…Check if you run itEPSS 0.12%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfc: s3fwrn5: allocate rx skb before consuming bytes s3fwrn82_uart_read() reports the number of acc…Check if you run itEPSS 0.12%May 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: PCI: hv: Fix double ida_free in hv_pci_probe error path If hv_pci_probe() fails after storing the d…Check if you run itEPSS 0.12%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mshv: Fix infinite fault loop on permission-denied GPA intercepts Prevent infinite fault loops when…Check if you run itEPSS 0.11%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Fix errors in IRQ cleanup IRQs are enabled through sdca_irq_populate() from component p…Check if you run itEPSS 0.11%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiate_features op to Hyper-V ops table Commit a7075f501bd3 ("ixgbevf: fix…Check if you run itEPSS 0.12%May 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account for tailroom and min frame The current headroom va…Check if you run itEPSS 0.14%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on bind AF_XDP bind currently accepts zero-copy pool co…Check if you run itEPSS 0.12%May 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns exit xfrm_policy_fini() frees the policy_bydst hash…Check if you run itEPSS 0.13%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: af_key: zero aligned sockaddr tail in PF_KEY exports PF_KEY export paths use when reserving so…Check if you run itEPSS 0.12%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Disable all pin interrupts during probe A chip being probed may have the interru…Check if you run itEPSS 0.11%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error path When ip_vs_bind_scheduler() succeeds in ip_vs_…Check if you run itEPSS 0.12%May 6, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: net: ioam6: fix OOB and missing lock When trace->type.bit6 is set: if (trace->type.bit6) { ...Check if you run itEPSS 0.56%May 6, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot reported a WARN on my patch series [1].Check if you run itEPSS 0.13%May 6, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in even…Check if you run itEPSS 0.48%May 6, 2026
- Medium4.9The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1.Check if you run itEPSS 0.55%May 6, 2026
- Medium4.7Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects.Check if you run itEPSS 0.15%May 6, 2026
- High7.3The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled.Check if you run itEPSS 0.26%May 6, 2026
- High7.3An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenan…Check if you run itEPSS 0.26%May 6, 2026
- Medium6.5The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83.Check if you run itEPSS 0.27%May 6, 2026
Sort