Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().Check if you run itEPSS 0.56%Jul 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in binderfs_evict_inode() Running 'stress-ng --binderfs 16 --timeout 300' under KASANCheck this weekEPSS 17.00%Jul 4, 2025
- Medium6.5A flaw was found in the key export functionality of libssh.Check this weekEPSS 62.00%Jul 4, 2025
- Medium4.1wire-ios is an iOS client for the Wire secure messaging application.Check this weekEPSS 17.00%Jul 3, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between SIT and SSA w/ below testcase, it will cause inconsistence inCheck this weekEPSS 17.00%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ destruction if the firmware command fCheck if you run itEPSS 0.18%Jul 3, 2025
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse The unexpected MPLS packet may not end with the bottom label sCheck if you run itEPSS 0.48%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BCheck this weekEPSS 20.00%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ice: fix Tx scheduler error handling in XDP callback When the XDP program is loaded, the XDP callback adds new TCheck if you run itEPSS 0.20%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete This reworks MGMT_OP_REMOVE_ADV_MONITOR to not useCheck if you run itEPSS 0.20%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Protect mgmt_pending list with its own lock This uses a mutex to protect from concurrent accessCheck if you run itEPSS 0.18%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() syzbot reports: BUG: KASAN: slab-use-afteCheck this weekEPSS 19.00%Jul 3, 2025
- Medium6.1Incorrect access control in Ullu (Android version v2.9.929 and IOS version v2.8.0) allows attackers to bypass parental pin feature via unspecified vectors.Check this weekEPSS 15.00%Jul 1, 2025
- UnknownFortinet fortiswitchmanager Relative Path TraversalPatch nowKEVEPSS 0.93%Jun 29, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects AiosCheck this weekEPSS 15.00%Jun 27, 2025
- Medium6.0iOS Simulator MCP Server (ios-simulator-mcp) is a Model Context Protocol (MCP) server for interacting with iOS simulators.Check this weekEPSS 64.00%Jun 26, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prismtechstudios Modern Footnotes modern-footnotes allows Stored XSS.This issuCheck this weekEPSS 23.00%Jun 20, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/poly1305 - fix a read out-of-bound A kasan error was reported during fuzzing: BUG: KASAN: slab-outCheck this weekEPSS 24.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 Don't BUG/WARN on interrupt injection due to GICheck this weekEPSS 27.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: md-raid10: fix KASAN warning There's a KASAN warning in raid10_remove_disk when running the lvm test lvconvert-rCheck this weekEPSS 24.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: powerpc/pci: Fix get_phb_number() locking The recent change to get_phb_number() causes a DEBUG_ATOMIC_SLEEP warnCheck this weekEPSS 14.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set the DMA mask for the udmabuf device (v2) If the DMA mask is not set explicitly, the following warniCheck this weekEPSS 24.00%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix kernel BUG in purge_effective_progs Syzkaller reported a triggered kernel BUG as follows: -----Check this weekEPSS 28.00%Jun 18, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: don't restore null sk_state_change queue->state_change is set as part of nvmet_tcp_set_queue_sock(),Check if you run itEPSS 0.56%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warning on driver removal started occurring after commit 9dd05df840Check this weekEPSS 21.00%Jun 18, 2025