Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.5When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacCheck this weekEPSS 24.30%May 7, 2025
- High8.7When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.Check if you run itEPSS 0.44%May 7, 2025
- High8.7On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles.Check if you run itEPSS 0.39%May 7, 2025
- High8.3When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing systCheck if you run itEPSS 0.17%May 7, 2025
- Critical9.2On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-basedCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.43%May 7, 2025
- Medium4.8A vulnerability was found in PyTorch 2.6.0+cu124.Check if you run itEPSS 0.19%May 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in ext4_update_inline_data Syzbot found the following issue: EXT4-fs (loop0): mounted filesystCheck this weekEPSS 21.00%May 2, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do nCheck this weekEPSS 21.00%May 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: block: Fix possible memory leak for rq_wb on add_disk failure kmemleak reported memory leaks in device_add_disk(Check this weekEPSS 20.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix use-after-free for dynamic ftrace_ops KASAN reported a use-after-free with ftrace ops [1].Check this weekEPSS 22.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidating TLB When the size of the range invalidated is larger than rCheck if you run itEPSS 0.21%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a lock on kvm->srcu when useCheck this weekEPSS 22.00%May 1, 2025
- Critical9.0LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrarCheck if you run itEPSS 0.68%May 1, 2025
- High8.0ManageWiki is a MediaWiki extension allowing users to manage wikis.Check if you run itEPSS 0.67%Apr 21, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug as below: ------------[ cuCheck this weekEPSS 19.00%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dst_release Upstream fix ac888d58869b ("net: do not delay dst_entries_add()Check this weekEPSS 21.00%Apr 16, 2025
- High7.3An issue in Oncord+ Android Infotainment Systems OS Android 12, Model Hardware TS17,Hardware part Number F57L_V3.2_20220301, and Build Number PlatformVER:K24-2023/05/09-v0.01 allowCheck this weekEPSS 90.00%Apr 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix request ref counting during error capture & debugfs dump When GuC support was added t…Check if you run itEPSS 0.24%Mar 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit ("iommu/vt-d: Allocate DMAR fault interrupts locally")…Check if you run itEPSS 0.21%Mar 27, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in th…Check if you run itEPSS 0.22%Mar 27, 2025