Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: x86/microcode/AMD: Fix __apply_microcode_amd()'s return value When verify_sha256_digest() fails, __apply_microcoCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs On the following path, flush_tlb_range() can beCheck if you run itEPSS 0.24%Apr 16, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deCheck if you run itEPSS 0.69%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer_head allocated on theCheck if you run itEPSS 0.20%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in print_graph_function_flags during tracer switching Kairui reported a UAF issue inCheck if you run itEPSS 0.30%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs Patch series "mm: fixes for device-exclusive entries (hmm)", v2.Check if you run itEPSS 0.28%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion When BIOS neglects to assign bus numbers to PCCheck if you run itEPSS 0.25%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() Currently, zswap_cpu_comp_dead() calls crypCheck if you run itEPSS 0.20%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return vaCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nfsd: put dl_stid if fail to queue dl_recall Before calling nfsd4_run_cb to queue dl_recall to the callback_wq,Check if you run itEPSS 0.58%Apr 16, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix RCU stall while reaping monitor destination ring While processing the monitor destination ringCheck if you run itEPSS 0.21%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before truncation in jfs_truncate_nolock() Added a check for "read-only" mode in the fuCheck if you run itEPSS 0.23%Apr 16, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Fix link state exit during switch upstream function removal Before 456d8aa37d0f ("PCI/ASPM: Disable ASCheck if you run itEPSS 0.23%Apr 16, 2025
- Medium5.3Missing Authorization vulnerability in ActiveDEMAND Online Agency Marketing Automation ActiveDEMAND activedemand allows Accessing Functionality Not Properly Constrained by ACLs.ThiCheck if you run itEPSS 0.58%Apr 16, 2025
- Medium5.3Missing Authorization vulnerability in slazzercom Slazzer Background Changer slazzer-background-changer allows Accessing Functionality Not Properly Constrained by ACLs.This issue aCheck if you run itEPSS 0.58%Apr 16, 2025
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Upload a Web Shell to a WebCheck if you run itEPSS 0.62%Apr 16, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.73%Apr 16, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in misstt123 oasys 1.0.Check if you run itEPSS 0.29%Apr 16, 2025
- Medium5.3A vulnerability classified as problematic was found in misstt123 oasys 1.0.Check if you run itEPSS 0.66%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 (onCheck if you run itEPSS 0.20%Apr 16, 2025
- Critical10.0In the Linux kernel, the following vulnerability has been resolved: netfilter: socket: Lookup orig tuple for IPv6 SNAT nf_sk_lookup_slow_v4 does the conntrack lookup for IPv4 packeCheck if you run itEPSS 0.47%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove This fixes the following crash: =======Check if you run itEPSS 0.21%Apr 16, 2025
- Medium5.3Mattermost Plugin MSTeams versions <2.1.0 and Mattermost Server versions 10.5.x <=10.5.1 with the MS Teams plugin enabled fail to perform constant time comparison on a MSTeams plugCheck if you run itEPSS 0.34%Apr 16, 2025
- Low3.0Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.9 fail to restrict domains the LLM can request to contact upstream which allows an authenticated user to exfiCheck if you run itEPSS 0.29%Apr 16, 2025
- Critical9.1A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot jail and gain root access to the Rancher container itself.Check if you run itEPSS 0.80%Apr 16, 2025
Sort