Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.4An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on th…Mar 12, 2026
- High7.1Ubuntu Linux 6.8 GA retains the legacy AF_UNIX garbage collector but backports upstream commit 8594d9b85c07 ("af_unix: Don’t call skb_get() for OOB skb").EPSS 0.2%Mar 5, 2026
- Low2.1Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fi…Mar 3, 2026
- Unknownlinux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilitiesFeb 17, 2026
- Low1.9It was discovered that process_crash() in data/apport in Canonical's Apport crash reporting tool may create crash files with incorrect group ownership, possibly exposi…EPSS 0.2%Dec 10, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensure the cached parent diEPSS 0.1%Oct 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging inEPSS 0.2%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() Currently, calling bpf_map_kmalloc_node() fEPSS 0.2%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects When the "proxy" option is enabled on a VXLANEPSS 0.1%Sep 19, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counterEPSS 0.2%Sep 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dm thin: make get_first_thin use rcu-safe list first function The documentation in rculist.h explai…EPSS 0.2%Jan 21, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice in dm_array_cursor_end When dm_bm_read_lock() fails due to loEPSS 0.3%Jan 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the fo…EPSS 0.2%Jan 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur The action force umount(umount -f) will attempt tEPSS 0.5%Jan 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevenEPSS 0.2%Dec 27, 2024
- High7.8Linux Kernel Privilege Escalation VulnerabilityKEVEPSS 49.2%Apr 16, 2021
- Medium6.3It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library.EPSS 0.5%Sep 25, 2019
- High7.5A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND oEPSS 3.7%Jul 19, 2018
- High7.0Linux Kernel Race Condition VulnerabilityKEVEPSS 83.5%Nov 10, 2016
- Medium4.3Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 does not place org.apache.catalina.manager.StatusManagerServlet on the o…EPSS 6.2%Feb 25, 2016
- Critical10.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confideEPSS 7.2%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8…EPSS 5.5%Jan 21, 2016
- Medium5.0Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to a…EPSS 4.6%Jan 21, 2016
- Medium4.3Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.EPSS 4.1%Apr 16, 2014
149 records · page 6 of 6
PreviousNext