Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0gfs2: Fix unlikely race in gdlm_put_lockCheck if you run itEPSS 0.14%Dec 4, 2025
- UnknownDouble Public Key Signing Function Oracle Attack on Ed25519Open the advisoryNov 14, 2025
- UnknownreadFloat: memory exhaustion with large exponentOpen the advisoryNov 14, 2025
- Unknownprocess: command injection via argument list on WindowsCheck if you run itEPSS 6.83%Nov 14, 2025
- Unknownxml-conduit unbounded entity expansionCheck if you run itEPSS 0.83%Nov 14, 2025
- Unknowngit-annex private data exfiltration to compromised remoteCheck if you run itEPSS 1.54%Nov 14, 2025
- High7.1hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()Check if you run itEPSS 0.19%Oct 28, 2025
- High8.6Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.Check if you run itEPSS 0.67%Oct 22, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensure the cached parent diCheck if you run itEPSS 0.11%Oct 1, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging inCheck if you run itEPSS 0.15%Oct 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() Currently, calling bpf_map_kmalloc_node() fCheck if you run itEPSS 0.15%Sep 23, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects When the "proxy" option is enabled on a VXLANCheck if you run itEPSS 0.15%Sep 19, 2025
- UnknownUnexpected paths returned from LookPath in os/execCheck if you run itEPSS 0.55%Sep 18, 2025
- High7.0In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counterCheck if you run itEPSS 0.21%Sep 16, 2025
- High7.8net/sched: Fix backlog accounting in qdisc_dequeue_internalCheck if you run itEPSS 0.15%Sep 5, 2025
- High7.8netfilter: nf_tables: reject duplicate device on updatesCheck if you run itEPSS 0.28%Sep 3, 2025
- Low2.3Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued.Open the advisoryAug 28, 2025
- UnknownArbitrary Code Execution (ACE) VulnerabilityOpen the advisoryJul 31, 2025
- High8.2mptcp: make fallback action and fallback decision atomicCheck if you run itEPSS 0.21%Jul 28, 2025
- Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityCheck if you run itEPSS 0.65%Jul 25, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: virtio: break and reset virtio devices on device_shutdown() Hongyu reported a hang on kexec in a VM.Check if you run itEPSS 0.16%Jun 18, 2025
- Medium6.8Sensitive headers not cleared on cross-origin redirect in net/httpCheck if you run itEPSS 0.67%Jun 11, 2025
- Medium4.8A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb.Check if you run itEPSS 0.17%Jun 9, 2025
- Medium4.8A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb.Check if you run itEPSS 0.17%Jun 9, 2025
- High8.8KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interceptionCheck if you run itEPSS 0.19%May 20, 2025