Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownSensitive headers not cleared on cross-origin redirect in net/httpEPSS 0.7%Jun 11, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.0%Jun 1, 2025
- High8.1FreeType Out-of-Bounds Write VulnerabilityKEVEPSS 27.8%Mar 11, 2025
- High7.0Linux Kernel Use-After-Free VulnerabilityKEVEPSS 3.7%Jan 30, 2023
- Medium5.5processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.EPSS 0.4%Jan 23, 2023
- High7.8A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or othJan 20, 2023
- Medium5.5In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system cr…EPSS 1.0%Jan 17, 2023
- Medium5.5atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers c…EPSS 0.3%Jan 12, 2023
- Medium5.5cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion…EPSS 0.3%Jan 12, 2023
- Medium5.5An issue was discovered in the Linux kernel 5.10.x before 5.10.155.EPSS 0.4%Dec 23, 2022
- Medium5.5Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond t…EPSS 0.2%Dec 7, 2022
- High8.8There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execu…EPSS 2.5%Nov 23, 2022
- Medium6.5There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.EPSS 0.5%Nov 23, 2022
- High7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.EPSS 22.4%Nov 4, 2022
- Medium6.7drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.EPSS 0.3%Oct 26, 2022
- Medium5.5mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.EPSS 0.9%Oct 9, 2022
- Medium4.7roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a rep…EPSS 0.2%Sep 30, 2022
- Medium4.2drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB de…EPSS 0.3%Sep 30, 2022
- Medium5.5In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.EPSS 0.8%Sep 21, 2022
- Medium5.5drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a mems…EPSS 0.3%Sep 18, 2022
- High8.8Apple iOS and macOS Out-of-Bounds Write VulnerabilityKEVEPSS 9.9%Aug 17, 2022
- UnknownCVE-2025-5399 is named on the public Arch Linux Security page.Unknown date
- UnknownCVE-2025-49091 is named on the public Arch Linux Security page.Unknown date
- UnknownCVE-2025-48708 is named on the public Arch Linux Security page.Unknown date
- UnknownCVE-2025-48432 is named on the public Arch Linux Security page.Unknown date
97 records · page 1 of 4
PreviousNext