Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Fix slab-use-after-free read in sg_release() Fix a use-after-free bug in sg_release(), detected by syzCheck if you run itEPSS 0.29%Dec 27, 2024
- UnknownD-Link DIR-845L HNAP OS Command InjectionPatch nowKEVEPSS 6.46%Dec 26, 2024
- UnknownD-Link GO-RT-AC750 HNAP OS Command InjectionPatch nowKEVEPSS 10.39%Dec 26, 2024
- Unknownfiberhome an5506-01-a_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 10.08%Dec 20, 2024
- High7.2BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection VulnerabilityPatch nowKEVEPSS 13.70%Dec 18, 2024
- Unknownmimosa b5_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.31%Dec 16, 2024
- UnknownMitel MiCollab NuPoint Messenger (NPM) SQL Injection VulnerabilityPatch nowKEVEPSS 65.73%Dec 10, 2024
- Medium6.5In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN Hide KVM's pt_mode mo…Check if you run itEPSS 0.24%Dec 4, 2024
- Unknownecoa ecs_router_controller-ecs_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.43%Nov 26, 2024
- Medium6.5Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityPatch nowKEVEPSS 84.27%Nov 12, 2024
- UnknownFour-Faith adjust_sys_time OS Command InjectionPatch nowKEVEPSS 84.12%Nov 9, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause kernel cra…Check if you run itEPSS 0.24%Oct 21, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition In the ether3_pr…Check if you run itEPSS 0.23%Oct 21, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix possible UAF for bfqq->bic with merge chain 1) initial state, three tasks: Process…Check if you run itEPSS 0.24%Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in rtl2830_pid…Check if you run itEPSS 0.28%Oct 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kst…Check if you run itEPSS 0.28%Sep 18, 2024
- Unknownui unifi_network_application Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 0.88%Sep 18, 2024
- UnknownDrayTek vigor2960_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.72%Sep 18, 2024
- UnknownCisco rv340w_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 2.17%Sep 18, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix TX fifo corruption Sometimes, when a packet is received on channel A at almo…Check if you run itEPSS 0.18%Sep 4, 2024
- High7.5A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP DNS queries.Check if you run itEPSS 0.77%Sep 4, 2024
- Critical9.6Google Chromium V8 Type Confusion VulnerabilityPatch nowKEVEPSS 21.10%Aug 21, 2024
- High8.8Google Chromium V8 Inappropriate Implementation VulnerabilityPatch nowKEVEPSS 18.53%Aug 21, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: leds: trigger: Unregister sysfs attributes before calling deactivate() Triggers which have trigger…Check if you run itEPSS 0.25%Aug 17, 2024
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: kvm: s390: Reject memory region operations for ucontrol VMs This change rejects the KVM_SET_USER_ME…Check if you run itEPSS 0.21%Aug 17, 2024