Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash underCheck if you run itEPSS 0.34%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck if you run itEPSS 0.38%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() If bio_add_folio() fails (because it is fuCheck if you run itEPSS 0.18%May 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output_userspace() This patch replaces the manual Netlink attributeCheck if you run itEPSS 0.25%May 29, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macrosCheck if you run itEPSS 0.17%May 29, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix uninitialized memcache pointer in user_mem_abort() Commit fce886a60207 ("KVM: arm64: Plumb the pCheck if you run itEPSS 0.16%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: module: ensure that kobject_put() is safe for module type kobjects In 'lookup_or_create_module_kobject()', an inCheck if you run itEPSS 0.21%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix NULL pointer access This patch ensures that the UCSI driver waits for all penCheck if you run itEPSS 0.21%May 29, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe The spin lock tx_handling_spinlockCheck if you run itEPSS 0.18%May 29, 2025
- High7.3Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write.Check this weekEPSS 21.00%May 28, 2025
- Medium6.5Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.42%May 27, 2025
- Medium5.4Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.34%May 27, 2025
- High8.8Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.62%May 27, 2025
- UnknownCVE-2025-32914 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.77%May 27, 2025
- UnknownCVE-2025-32913 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.84%May 27, 2025
- UnknownCVE-2025-32907 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.70%May 27, 2025
- UnknownCVE-2025-32906 is listed by ALAS-2025-1979 (important): libsoup.Check if you run itEPSS 0.97%May 27, 2025
- High7.3A flaw was found in GIMP when processing XCF image files.Check if you run itEPSS 0.24%May 27, 2025
- High7.3A flaw was found in GIMP when processing certain TGA image files.Check if you run itEPSS 0.27%May 27, 2025
- High7.3Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path.Check if you run itEPSS 0.21%May 26, 2025
- Medium5.3For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.Check if you run itEPSS 0.23%May 26, 2025
- Medium5.1The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.Check if you run itEPSS 0.22%May 26, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's limit via the ->change()Check if you run itEPSS 0.21%May 26, 2025
- Low2.0A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available.Check if you run itEPSS 0.22%May 26, 2025
- Medium5.7Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root.Check if you run itEPSS 0.18%May 26, 2025