Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Sensitive headers not cleared on cross-origin redirect in net/httpCheck if you run itEPSS 0.67%Jun 11, 2025
- Medium4.9A flaw was found in Samba.Check this weekEPSS 75.00%Jun 6, 2025
- Medium4.0An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23.Check if you run itEPSS 0.75%Jun 5, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 98.97%Jun 1, 2025
- Medium4.0gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case.Check if you run itEPSS 0.32%May 23, 2025
- High7.5When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND always checks it.Check this weekEPSS 15.30%May 21, 2025
- Medium6.5A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using instead of the required .Check if you run itEPSS 0.51%May 19, 2025
- High7.5The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process.Check if you run itEPSS 0.82%May 19, 2025
- Low3.7In Node.js, the internal binding leaks memory due to a corrupted pointer in : a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set.Check if you run itEPSS 0.56%May 19, 2025
- Medium5.3An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.Check this weekEPSS 14.31%May 8, 2025
- Medium4.5dbclient in Dropbear SSH before 2025.88 allows command injection via an untrusted hostname argument, because a shell is used.Check if you run itEPSS 0.59%May 7, 2025
- High8.1FreeType Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 27.77%Mar 11, 2025
- High7.0Linux Kernel Use-After-Free VulnerabilityPatch nowKEVEPSS 3.67%Jan 30, 2023
- Medium5.5processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image.Check if you run itEPSS 0.44%Jan 23, 2023
- High7.8A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or othCheck if you run itEPSS 0.26%Jan 20, 2023
- Medium5.5In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a denial of service (system cr…Check if you run itEPSS 1.01%Jan 17, 2023
- Medium5.5atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers c…Check if you run itEPSS 0.27%Jan 12, 2023
- Medium5.5cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion…Check if you run itEPSS 0.33%Jan 12, 2023
- Medium5.5An issue was discovered in the Linux kernel 5.10.x before 5.10.155.Check if you run itEPSS 0.38%Dec 23, 2022
- Medium5.5Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond t…Check if you run itEPSS 0.22%Dec 7, 2022
- High8.8There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execu…Check if you run itEPSS 2.45%Nov 23, 2022
- Medium6.5There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely.Check if you run itEPSS 0.47%Nov 23, 2022
- High7.5The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow.Check this weekEPSS 22.39%Nov 4, 2022
- Medium6.7drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.Check if you run itEPSS 0.35%Oct 26, 2022
- Medium5.5mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.Check if you run itEPSS 0.92%Oct 9, 2022
97 records · page 1 of 4
PreviousNext