Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownLiteSpeed Technologies LiteSpeed Cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Oct 29, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commit 2a934fdb…Check if you run itEPSS 0.24%Oct 28, 2025
- UnknownFortinet FortiOS Heap-based Buffer OverflowPatch nowKEVEPSS 0.24%Oct 23, 2025
- Unknownrapid7 velociraptor Incorrect Default PermissionsPatch nowKEVEPSS 1.02%Oct 22, 2025
- Critical9.3Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel VulnerabilityPatch nowKEVEPSS 2.77%Oct 20, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work The origin code calls cancel_de…Open the advisoryOct 18, 2025
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 44.45%Oct 15, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().Check if you run itEPSS 0.16%Oct 9, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nfsd: clean up potential nfsd_file refcount leaks in COPY codepath There are two different flavors…Check if you run itEPSS 0.28%Oct 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on cancel_dela…Check if you run itEPSS 0.15%Oct 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: let recv_done verify data_offset, data_length and remaining_data_length This is inspir…Open the advisoryOct 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) In smbd_destr…Check if you run itEPSS 0.29%Oct 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path During tests of another unre…Check if you run itEPSS 0.31%Oct 4, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensure the cached parent diCheck if you run itEPSS 0.11%Oct 1, 2025
- Medium5.3Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata.Open the advisorySep 22, 2025
- Low3.7PureVPN client applications on Linux through September 2025 mishandle firewalling.Open the advisorySep 18, 2025
- Low3.7PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume.Open the advisorySep 18, 2025
- High8.8The Sparkle framework includes a helper tool Autoupdate.Check if you run itEPSS 0.20%Sep 16, 2025
- Medium4.8The Sparkle framework includes an XPC service Downloader.xpc, by default this service is private to the application its bundled with.Check if you run itEPSS 0.17%Sep 16, 2025
- Medium5.9Openfire is an XMPP server licensed under the Open Source Apache License.Check this weekEPSS 23.00%Sep 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning in cifs_smb3_do_mount() This fixes the following warning reported by kernel test robotCheck if you run itEPSS 0.16%Sep 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus_core) Fix NULL pointer dereference Pass i2c_client to _pmbus_is_enabled to drop the assumption thaCheck if you run itEPSS 0.15%Sep 15, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix race on port output assume the following setup on a single machine: 1.Check if you run itEPSS 0.11%Sep 15, 2025
- High8.1In the Linux kernel, the following vulnerability has been resolved: skbuff: Fix a race between coalescing and releasing SKBs Commit 1effe8ca4e34 ("skbuff: fix coalescing for page_pCheck if you run itEPSS 0.27%Sep 15, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: NFSD: fix use-after-free on source server when doing inter-server copy Use-after-free occurred when the laundromCheck if you run itEPSS 0.37%Sep 15, 2025