Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2024-53173 is listed by ALAS-2025-1983 (important): kernel.Check if you run itEPSS 0.27%Jun 9, 2025
- High7.3In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking for bcm_op runtime updates The CAN broadcast manager (CAN BCM) can send a sequence of CANCheck if you run itEPSS 0.27%Jun 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op wCheck if you run itEPSS 0.28%Jun 8, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() Not everything requires locking in there, whCheck if you run itEPSS 0.22%Jun 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Savino says: "We are writing to report tCheck if you run itEPSS 0.52%Jun 6, 2025
- Medium4.9A flaw was found in Samba.Check if you run itEPSS 0.75%Jun 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() When enqueuing the first packet to an HFSC cCheck if you run itEPSS 0.23%Jun 6, 2025
- Medium4.0An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23.Check if you run itEPSS 0.75%Jun 5, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.97%Jun 1, 2025
- Medium5.9ALAS-2025-1981 (medium): perlCheck if you run itEPSS 0.50%May 30, 2025
- Medium6.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as tCheck if you run itEPSS 0.41%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash underCheck if you run itEPSS 0.34%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck if you run itEPSS 0.38%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() If bio_add_folio() fails (because it is fuCheck if you run itEPSS 0.18%May 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attributeCheck if you run itEPSS 0.25%May 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macrosCheck if you run itEPSS 0.17%May 29, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce886a60207 ("KVM: arm64: Plumb the pCheck if you run itEPSS 0.16%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_or_create_module_kobject()', an inCheck if you run itEPSS 0.21%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all penCheck if you run itEPSS 0.21%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe The spin lock tx_handling_spinlockCheck if you run itEPSS 0.18%May 29, 2025
- High7.3Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write.Check this weekEPSS 21.00%May 28, 2025
- Medium6.5Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.42%May 27, 2025
- Medium5.4Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.34%May 27, 2025
- High8.8Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.62%May 27, 2025
- UnknownCVE-2025-32914 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.77%May 27, 2025