Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Both the ACE and CSI driver are missCheck if you run itEPSS 0.15%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to ensure that the packetCheck if you run itEPSS 0.17%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt handler is initialized beCheck if you run itEPSS 0.16%Sep 5, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix stack protector issue in send_ipi_data() Function kvm_io_bus_read() is called in function seCheck if you run itEPSS 0.15%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag inCheck if you run itEPSS 0.38%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to invalid nodes damon_migrate_pages() tries migration even if theCheck if you run itEPSS 0.16%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iova_to_phys The riscv_iommu_pte_fetch() function returns either NULL for unmCheck if you run itEPSS 0.14%Sep 5, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront andCheck if you run itEPSS 0.19%Sep 5, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if theCheck if you run itEPSS 0.17%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue as follows: BUG: KASAN: stack-out-of-bounCheck if you run itEPSS 0.19%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing: Limit access to parser->buffer when trace_get_user failed When the length of the string written to set_Check if you run itEPSS 0.18%Sep 5, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix ESI null pointer dereference ESI/MSI is a performance optimization feature that provideCheck if you run itEPSS 0.14%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smc_listen_out() BPF CI testing report a UAF issue: [ 16.446633] BUG: kernel NULCheck if you run itEPSS 0.46%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vm_bind_ioctl double free bug If the argument check during an array bind fails, the bind_ops are freCheck if you run itEPSS 0.16%Sep 5, 2025
- High8.6On-Chip Debug and Test Interface With Improper Access Control and Improper Protection against Electromagnetic Fault Injection (EM-FI) in Nordic Semiconductor nRF52810 allow attackeCheck if you run itEPSS 0.23%Sep 5, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gourl GoUrl Bitcoin Payment Gateway & Paid Downloads & Membership gourl-bitcoiCheck if you run itEPSS 0.18%Sep 5, 2025
- Low3.3In Permission Manager, there is a possible way for the microphone privacy indicator to remain activated even after the user attempts to close the app due to a logic error in the coCheck if you run itEPSS 0.08%Sep 5, 2025
- Medium5.5In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check.Check if you run itEPSS 0.07%Sep 5, 2025
- Medium5.3A security vulnerability has been detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.38%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in KaizenCoders Enable Latex enable-latex allows Stored XSS.This issue affects Enable Latex: from n/a through <= 1.2.16.Check if you run itEPSS 0.12%Sep 5, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KaizenCoders Table of content content-table allows Stored XSS.This issue affecCheck if you run itEPSS 0.24%Sep 5, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Yaidier WN Flipbox Pro wn-flipbox-pro allows Reflected XSS.This issue affects WN Flipbox Pro: from n/a through <= 2.1.Check if you run itEPSS 0.13%Sep 5, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One ai-auto-tool allows Server Side Request ForgeCheck if you run itEPSS 0.18%Sep 5, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue affects NotificationCheck if you run itEPSS 0.14%Sep 5, 2025
- Critical9.8Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityPatch nowKEVEPSS 3.25%Sep 5, 2025
Sort