Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.7A flaw was found in the cookie parsing logic of the libsoup HTTP library, used in GNOME applications and other software.Check if you run itEPSS 0.70%May 19, 2025
- High7.5A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications.Check if you run itEPSS 0.81%May 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: ump: Fix buffer overflow at UMP SysEx message conversion The conversion function from MIDI 1.0 to UMP packCheck if you run itEPSS 0.24%May 19, 2025
- Medium6.5A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using instead of the required .Check if you run itEPSS 0.51%May 19, 2025
- High7.5The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process.Check if you run itEPSS 0.82%May 19, 2025
- Low3.7In Node.js, the internal binding leaks memory due to a corrupted pointer in : a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.5A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault.Check if you run itEPSS 0.54%May 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report [1]Check if you run itEPSS 0.22%May 16, 2025
- High7.8Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.84%May 15, 2025
- Medium6.6net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system.Check if you run itEPSS 0.20%May 14, 2025
- Critical9.3Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allowsCheck if you run itEPSS 0.56%May 14, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() In dw2102_i2c_transfer, msg is controlled by user.Check if you run itEPSS 0.19%May 14, 2025
- High7.8A flaw was found in Yggdrasil, which acts as a system broker, allowing the processes to communicate to other children's "worker" processes through the DBus component.Check if you run itEPSS 0.18%May 14, 2025
- Medium6.7External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.44%May 13, 2025
- UnknownCVE-2025-21920 is listed by ALAS-2025-1977 (important): kernel.Check if you run itEPSS 0.23%May 12, 2025
- UnknownCVE-2024-46956 is listed by ALAS-2025-1978 (important): ghostscript.Check if you run itEPSS 0.39%May 12, 2025
- UnknownCVE-2024-46953 is listed by ALAS-2025-1978 (important): ghostscript.Check if you run itEPSS 0.39%May 12, 2025
- UnknownCVE-2024-46951 is listed by ALAS-2025-1978 (important): ghostscript.Check if you run itEPSS 0.36%May 12, 2025
- UnknownCVE-2022-49465 is listed by ALAS-2025-1977 (important): kernel.Check if you run itEPSS 0.29%May 12, 2025
- UnknownCVE-2022-49413 is listed by ALAS-2025-1977 (important): kernel.Check if you run itEPSS 0.29%May 12, 2025
- UnknownCVE-2022-49168 is listed by ALAS-2025-1977 (important): kernel.Check if you run itEPSS 0.33%May 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition In btsdio_probe, the data->workCheck if you run itEPSS 0.19%May 10, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Consistently treat platform_max as control value This reverts commit 9bdd10d57a88 ("ASoC: ops: ShiftCheck if you run itEPSS 0.28%May 9, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() Add NULL check for mlx5_get_flow_namespace() reCheck if you run itEPSS 0.28%May 9, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result If the FW doesn't support the PDS_CORE_CMD_FW_CONTROCheck if you run itEPSS 0.29%May 9, 2025