Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3In the Linux kernel, the following vulnerability has been resolved: ksmbd: require minimum ACE size in smb_check_perm_dacl() Both ACE-walk loops in smb_check_perm_dacl…Check if you run itEPSS 0.32%May 1, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: smb: server: fix active_num_conn leak on transport allocation failure Commit 77ffbcac4e56 ("smb: se…Check if you run itEPSS 0.55%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifs_mount_get_tcon() with SMB1 UNI…Check if you run itEPSS 0.10%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl build_sec_desc() and id_mode_to…Check if you run itEPSS 0.34%May 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path smb2_ioctl_query_info() has two…Check if you run itEPSS 0.35%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expected messa…Check if you run itEPSS 0.13%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() smb_inherit_dacl() trusts the on…Check if you run itEPSS 0.49%May 1, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte alignment…Check if you run itEPSS 0.40%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: use check_add_overflow() to prevent u16 DACL size overflow set_posix_acl_entries_dacl() and…Check if you run itEPSS 0.12%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: writeback: Fix use after free in inode_switch_wbs_work_fn() inode_switch_wbs_work_fn() has a loop l…Check if you run itEPSS 0.12%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io() In f2fs_compress_write_end_io(), de…Check if you run itEPSS 0.12%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: take a reference on the USB device in create_card() The caiaq driver stores a pointer…Check if you run itEPSS 0.12%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() In tpacket_snd(), when PACKET_VNET_…Check if you run itEPSS 0.11%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed When retrieving the PEK C…Check if you run itEPSS 0.13%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the…Check if you run itEPSS 0.13%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for…Check if you run itEPSS 0.13%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpc_preparse(), there…Check if you run itEPSS 0.14%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute for the virt_wi…Check if you run itEPSS 0.13%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized diren…Check if you run itEPSS 0.28%May 1, 2026
- Low2.1A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09.Check if you run itEPSS 0.17%May 1, 2026
- Low1.9A vulnerability was detected in Exiftool up to 13.53.Check if you run itEPSS 0.18%May 1, 2026
- Medium5.5A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0.Check if you run itEPSS 0.29%May 1, 2026
- High8.8The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2.Check if you run itEPSS 0.17%May 1, 2026
- Medium4.3The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14.Check if you run itEPSS 0.15%May 1, 2026
- High7.5hickory-proto vulnerable to CPU exhaustion during message encoding due to O(n²) name compressionCheck if you run itEPSS 0.41%May 1, 2026
Sort