Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Sonos Era 300 Speaker libsmb2 Use-After-Free Remote Code Execution Vulnerability.Check this weekEPSS 54.00%Apr 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properlyCheck if you run itEPSS 0.27%Apr 18, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e18a54a3943c098d2226b245dCheck this weekEPSS 37.00%Apr 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix r_count dec/increment mismatch r_count is only increased when there is an oplock break wait, so r_couCheck this weekEPSS 49.00%Apr 16, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for durable handle context Add missing bounds check for durable handle context.Check this weekEPSS 48.00%Apr 16, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for create lease context Add missing bounds check for create lease context.Check this weekEPSS 52.00%Apr 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deCheck this weekEPSS 68.00%Apr 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup andCheck this weekEPSS 69.00%Apr 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix overflow in dacloffset bounds check The dacloffset field was originally typed as int and used in an uCheck this weekEPSS 78.00%Apr 16, 2025
- High8.3In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access psid->sub_auth[psid->num_subauth - 1] withouCheck this weekEPSS 58.00%Apr 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request.Check this weekEPSS 69.51%Apr 16, 2025
- Medium6.3Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally.Check if you run itEPSS 0.27%Apr 15, 2025
- Medium5.0CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal via the /WebInterface/function/ URI to read files accessible by SMB at UNC share pathnames,Check this weekEPSS 18.09%Apr 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cifs: Fix oops due to uncleared server->smbd_conn in reconnect In smbd_destroy(), clear the server-…Check if you run itEPSS 0.54%Mar 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for next_buffer in receive_encrypted_standard() Add check for the return val…Check if you run itEPSS 0.62%Mar 12, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed that NETWORK_INTERFACE_INFO::Link…Check if you run itEPSS 0.40%Feb 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: fec: handle page_pool_dev_alloc_pages error The fec_enet_update_cbd function calls page_pool_d…Check if you run itEPSS 0.45%Jan 31, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOBs when building SMB2_IOCTL request When using encryption, either enforced by th…Check if you run itEPSS 0.28%Nov 7, 2024
- UnknownSamba Samba Out-of-bounds ReadPatch nowKEVEPSS 73.59%Jul 25, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_…Check if you run itEPSS 0.53%Jun 25, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue Issue reported by customer during SRIOV testing,…Check if you run itEPSS 0.25%May 20, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: fix NULL function pointer dereference Baruch reported an OOPS when using the designware…Check if you run itEPSS 0.26%May 20, 2024
- Unknownalfresco alfresco URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 4.47%Jan 22, 2024
- UnknownMicrosoft Windows Use of Uninitialized ResourcePatch nowKEVEPSS 10.48%Dec 20, 2023
- UnknownOracle E-Business Suite Application Mgmt Pack for E-Business Suite VulnerabilityPatch nowKEVEPSS 3.81%Dec 14, 2023