Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9A flaw was found in the OpenSSH package.Feb 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/ipv6: release expired exception dst cached in socket Dst objects get leaked in ip6_negative_adv…Dec 27, 2024
- High7.8Linux Kernel Out-of-Bounds Access VulnerabilityKEVEPSS 4.1%Dec 27, 2024
- High7.1Linux Kernel Out-of-Bounds Read VulnerabilityKEVEPSS 1.4%Dec 24, 2024
- High7.8Linux Kernel Out-of-Bounds Write VulnerabilityKEVEPSS 3.4%Dec 2, 2024
- Medium6.3Apple Multiple Products Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 22.6%Nov 19, 2024
- High8.8Apple Multiple Products Code Execution VulnerabilityKEVEPSS 10.2%Nov 19, 2024
- Medium5.5Linux Kernel Use of Uninitialized Resource VulnerabilityKEVEPSS 0.8%Nov 18, 2024
- Critical9.8gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4_CONN_MSG_LEN is not sufficient for a trailing '\0' character.Nov 11, 2024
- Medium5.9An issue was discovered in libexpat before 2.6.4.Oct 27, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tail call between progs attached to different hooks bpf progs can be attached to kerne…Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out of bounds in degamma hardware format translation Fixes index out of…Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix slab-use-after-free in ext4_split_extent_at() We hit the following use-after-free: ======…Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in rtl2830_pid…Oct 21, 2024
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() syzbot reported that nf_reject_ip6_tcphdr…Oct 21, 2024
- Critical9.8Mozilla Firefox Use-After-Free VulnerabilityKEVEPSS 23.2%Oct 9, 2024
- Medium6.5When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fai…Sep 11, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal Keith reports a use-after-free when a…Aug 17, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: block/ioctl: prefer different overflow check Running syzkaller with the newly reintroduced signed i…Jul 12, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Jul 1, 2024
- High7.8Android Kernel Remote Code Execution VulnerabilityKEVEPSS 2.7%Jun 10, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityKEVEPSS 73.3%Jun 6, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: pinctrl: core: delete incorrect free in pinctrl_enable() The "pctldev" struct is allocated in devm_…May 30, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init().May 30, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: bna: ensure the copied buf is NUL terminated Currently, we allocate a nbytes-sized kernel buffer an…May 30, 2024