Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target_reset handler tcm_loop_target_reset() violates the…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report responses match the request It is possible for a malicious…Check if you run itEPSS 0.12%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The current error handling has two issues: First, pin_u…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Load Long Term Keys stores the user-provided enc_siz…Check if you run itEPSS 0.13%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_send() currently bounds MGMT_OP…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner went away When a DBC is released, the device sends…Check if you run itEPSS 0.18%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder pat…Check if you run itEPSS 0.28%May 1, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: move wake reason storage into validated event handlers hci_store_wake_reason(…Check if you run itEPSS 0.34%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few lines down…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmware buffer loads the firmware that was requested by .Check if you run itEPSS 0.18%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmware buffer loads the firmware that was requested by .Check if you run itEPSS 0.18%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix memory leak with CCA cards used as accelerator Tests showed that there is a memory…Check if you run itEPSS 0.16%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC The tegra crypto driver failed to set the CRYPTO_ALG_A…Check if you run itEPSS 0.60%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: iommupt: Fix short gather if the unmap goes into a large mapping unmap has the odd behavior that it…Check if you run itEPSS 0.17%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: validate control request size f_audio_complete() copies req->length byt…Check if you run itEPSS 0.18%May 1, 2026
- High8.8ZDI-26-680: Linux Kernel Crypto Subsystem Use-After-Free Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.51%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate owner of durable handle on reconnect Currently, ksmbd does not verify if the user a…Check if you run itEPSS 0.60%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io() The xfstests case "gene…Check if you run itEPSS 0.12%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate response sizes in ipc_validate_msg() ipc_validate_msg() computes the expected messa…Check if you run itEPSS 0.17%May 1, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte alignment…Check if you run itEPSS 0.40%May 1, 2026
- High8.8The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2.Check if you run itEPSS 0.26%May 1, 2026
- Medium4.3The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14.Check if you run itEPSS 0.18%May 1, 2026
- High7.2Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API.Check if you run itEPSS 0.58%May 1, 2026
- Critical9.8The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0.Check if you run itEPSS 2.93%May 1, 2026
- Medium6.4The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4.Check if you run itEPSS 0.36%May 1, 2026