Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpu_dm_hdcp.c copies pointers to amdgpu_dm_Check if you run itEPSS 0.21%May 20, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Check if you run itEPSS 0.00%May 20, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs On Qualcomm chipsets not all GPIOs are wakeCheck if you run itEPSS 0.21%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: iommu: Fix two issues in iommu_copy_struct_from_user() In the review for iommu_copy_struct_to_user() helper, MatCheck if you run itEPSS 0.20%May 20, 2025
- High8.8Linux Kernel 'sess->user' Object Use‑After‑Free VulnerabilityPatch nowKEVEPSS 0.88%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix error handling path in bnxt_init_chip() WARN_ON() is triggered in __flush_work() if bnxt_init_chip(Check if you run itEPSS 0.20%May 20, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net: use sock_gen_put() when sk_state is TCP_TIME_WAIT It is possible for a pointer of type struct inet_timewaitCheck if you run itEPSS 0.49%May 20, 2025
- Low3.7A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software.Check if you run itEPSS 0.70%May 19, 2025
- High7.5A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications.Check if you run itEPSS 0.81%May 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packCheck if you run itEPSS 0.24%May 19, 2025
- Medium6.5A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using instead of the required .Check if you run itEPSS 0.51%May 19, 2025
- High7.5The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process.Check if you run itEPSS 0.82%May 19, 2025
- Low3.7In Node.js, the internal binding leaks memory due to a corrupted pointer in : a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.5A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault.Check if you run itEPSS 0.54%May 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1]Check if you run itEPSS 0.22%May 16, 2025
- High7.8Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.84%May 15, 2025
- Medium6.6net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system.Check if you run itEPSS 0.20%May 14, 2025
- Critical9.3Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allowsCheck if you run itEPSS 0.56%May 14, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user.Check if you run itEPSS 0.19%May 14, 2025
- High7.8A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component.Check if you run itEPSS 0.18%May 14, 2025
- Medium6.7External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.44%May 13, 2025
- UnknownCVE-2025-21920 is listed by ALAS-2025-1977 (important): kernel.Check if you run itEPSS 0.23%May 12, 2025
- UnknownCVE-2024-46956 is listed by ALAS-2025-1978 (important): ghostscript.Check if you run itEPSS 0.39%May 12, 2025
- UnknownCVE-2024-46953 is listed by ALAS-2025-1978 (important): ghostscript.Check if you run itEPSS 0.39%May 12, 2025
- UnknownCVE-2024-46951 is listed by ALAS-2025-1978 (important): ghostscript.Check if you run itEPSS 0.36%May 12, 2025