Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes file_thp_enabled() incorrectly allows THP for files…Check if you run itEPSS 0.12%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_common_newlink() error path valis reported that a r…Check if you run itEPSS 0.13%Mar 20, 2026
- High8.5The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.Check if you run itEPSS 0.69%Mar 17, 2026
- Critical9.3The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries.Check if you run itEPSS 0.60%Mar 17, 2026
- High8.8Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change t…Check if you run itEPSS 0.56%Mar 17, 2026
- Critical9.3JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.53%Mar 17, 2026
- High7.0JetKVM prior to 0.5.4 does not verify the authenticity of downloaded firmware files.Check if you run itEPSS 0.10%Mar 17, 2026
- Medium6.3The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates.Check if you run itEPSS 0.33%Mar 17, 2026
- Critical9.3The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.57%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console.Check if you run itEPSS 0.36%Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before version 1.8.2 does not sufficiently verify the authenticity of uploaded firmware files.Check if you run itEPSS 0.13%Mar 17, 2026
- High8.4In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation.Check if you run itEPSS 0.09%Mar 10, 2026
- High8.4In __pkvm_init_vm of pkvm.c, there is a possible memory corruption due to a logic error in the code.Check if you run itEPSS 0.11%Mar 2, 2026
- High8.4In __pkvm_host_share_guest of mem_protect.c, there is a possible out of bounds write due to an integer overflow.Check if you run itEPSS 0.15%Mar 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 When loading guest XSAVE state v…Check if you run itEPSS 0.22%Jan 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the t…Check if you run itEPSS 0.11%Jan 14, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: tty: fix out-of-bounds access in tty_driver_lookup_tty() When specifying an invalid console= device…Check if you run itEPSS 0.15%Dec 30, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage adreno_show_object() is a trap! It will re-allocate the pointeCheck if you run itEPSS 0.14%Dec 30, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: drm/i915/gvt: fix gvt debugfs destroy When gvt debug fs is destroyed, need to have a sane check if…Check if you run itEPSS 0.16%Dec 24, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to…Check if you run itEPSS 0.22%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix invalid free tracking in ext4_xattr_move_to_block() In ext4_xattr_move_to_block(), the va…Check if you run itEPSS 0.16%Dec 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions after qp destroy HW may generate completions that in…Check if you run itEPSS 0.20%Dec 24, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced When re-injecting a soft interr…Check if you run itEPSS 0.19%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_state() For built with CONFIG_PREEMPT_RT=y kernels, t…Check if you run itEPSS 0.20%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoretically it's…Check if you run itEPSS 0.21%Dec 16, 2025