Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownArbitrary Code Execution (ACE) VulnerabilityOpen the advisoryMay 16, 2025
- Medium5.5libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer ovCheck if you run itEPSS 0.17%May 16, 2025
- Medium6.2Bullfrog's DNS over TCP bypasses domain filteringCheck if you run itEPSS 0.49%May 14, 2025
- Medium5.5libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a denial of service (var_set_leave_quiet assertion failure and application exit) via crafted input data, such asCheck if you run itEPSS 0.18%May 3, 2025
- High8.8wifi: ath11k: update channel list in reg notifier instead reg workerCheck this weekEPSS 26.00%Apr 16, 2025
- High7.0f2fs: quota: fix to avoid warning in dquot_writeback_dquots()Check this weekEPSS 26.00%Apr 16, 2025
- High8.7ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()Check this weekEPSS 19.00%Apr 16, 2025
- High7.5can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivateCheck if you run itEPSS 0.58%Mar 27, 2025
- High7.8kernel: be more careful about dup_mmap() failures and uprobe registeringCheck if you run itEPSS 0.20%Feb 27, 2025
- Medium5.4A flaw was found in npm-serialize-javascript.Check if you run itEPSS 1.12%Feb 10, 2025
- Low3.0shared_preferences_android vulnerabilityOpen the advisoryDec 6, 2024
- UnknownSecurity exception in org.apache.lucene.util.ArrayUtil.growExactOpen the advisoryNov 1, 2024
- Medium5.3Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect')Open the advisoryOct 28, 2024
- None0.0Agent Dart is missing certificate verification checksCheck if you run itEPSS 0.37%Oct 15, 2024
- UnknownUNKNOWN WRITE in bfd_elf_get_str_sectionOpen the advisorySep 13, 2024
- UnknownNegative-size-param in pdf_resize_resource_arraysOpen the advisoryAug 8, 2024
- UnknownSegv on unknown address in gs_gc_reclaimOpen the advisoryJul 25, 2024
- High8.6phonenumber: panic on parsing crafted phonenumber inputsCheck if you run itEPSS 0.71%Jul 7, 2024
- UnknownHeap-buffer-overflow in H5F_addr_encodeOpen the advisoryApr 30, 2024
- Medium5.3Serverpod improved security for stored password hashesCheck if you run itEPSS 0.26%Mar 28, 2024
- High7.4Serverpod client accepts any certificateCheck if you run itEPSS 0.28%Mar 28, 2024
- High7.8In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_load_chunk in io-ani.c) when parsing chunksCheck if you run itEPSS 0.41%Jan 26, 2024
- High7.3tj-actions/changed-files has Potential Actions command injection in output filenames (GHSL-2023-271)Check if you run itEPSS 3.35%Jan 2, 2024
- Medium5.9pubnub Insufficient Entropy vulnerabilityCheck if you run itEPSS 0.96%Dec 6, 2023
- UnknownHeap-buffer-overflow in H5T__bit_copyOpen the advisoryDec 3, 2023