Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfs_match_client() If the TLS security policy is of type R…Check if you run itEPSS 0.08%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The "req.start" and "req.len" variables are u64…Check if you run itEPSS 0.19%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext When alloc_slab…Check if you run itEPSS 0.20%Dec 16, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will help on validating the userq input args, and reject…Check if you run itEPSS 0.21%Dec 9, 2025
- Medium5.9Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.22%Dec 9, 2025
- Critical9.8IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to execute arbitrary commands due to improper process controls.Open the advisoryNov 13, 2025
- Medium6.5Evervault is a payment security solution.Open the advisoryNov 12, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: tls: wait for pending async decryptions if tls_strp_msg_hold fails Async decryption calls tls_strp_…Check if you run itEPSS 0.46%Nov 12, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().Check if you run itEPSS 0.17%Nov 12, 2025
- High7.1CoreDNS is a DNS server that chains plugins.Open the advisorySep 9, 2025
- Critical9.8Linux Kernel Improper Check for Unusual or Exceptional Conditions VulnerabilityPatch nowKEVEPSS 2.88%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handlin…Check if you run itEPSS 0.33%Aug 28, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA If we have a non-DATA record on the rx…Check if you run itEPSS 0.35%Aug 22, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, w…Check if you run itEPSS 0.40%Aug 19, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A security exploit was discovered in NFS over TLS in…Check if you run itEPSS 0.33%Aug 19, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Scott Mayhew discovered a security exploit in NFS ov…Check if you run itEPSS 0.59%Aug 19, 2025
- Medium6.5A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().Check this weekEPSS 77.00%Jul 10, 2025
- Medium6.5A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.Check this weekEPSS 90.00%Jul 10, 2025
- Medium5.3A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate pCheck if you run itEPSS 1.47%Jul 10, 2025
- Medium6.5A flaw was found in GnuTLS.Check if you run itEPSS 1.48%Jul 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] ------------[ cut here ]------------ [ 2172.936999] kernel BUG aCheck if you run itEPSS 0.20%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ destruction if the firmware command fCheck if you run itEPSS 0.18%Jul 3, 2025
- High8.3A flaw was found in Podman.Check this weekEPSS 52.00%Jun 24, 2025
- Critical9.8If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complCheck this weekEPSS 30.00%Jun 24, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: arm64: fix oops in concurrently setting insn_emulation sysctls emulation_proc_handler() changes table->data forCheck this weekEPSS 24.00%Jun 18, 2025