CVE Database

117989+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2024-40068
5.9 MEDIUM

Sourcecodester Online ID Generator System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at id_generator/admin/?page=templates/manage_template&id=1.

Apr 16, 2025
CVE-2024-22314
5.9 MEDIUM

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Apr 16, 2025
CVE-2025-20178
6.0 MEDIUM

A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary …

Apr 16, 2025
CVE-2025-20150
5.3 MEDIUM

A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts. This vulnerability is due to the improper handling …

Apr 16, 2025
CVE-2024-58249
3.7 LOW

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL.

Apr 16, 2025
CVE-2024-56736
6.5 MEDIUM

Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat (incubating): before 1.7.0. Users are recommended to upgrade to version 1.7.0, which …

Apr 16, 2025
CVE-2025-3697
6.3 MEDIUM

A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some unknown processing of …

Apr 16, 2025
CVE-2025-3696
6.3 MEDIUM

A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of the file /search/search_stock. php. …

Apr 16, 2025
CVE-2025-3694
7.3 HIGH

A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the component Login …

Apr 16, 2025
CVE-2025-23138
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currently, watch_queue_set_size() modifies the pipe buffers charged to user->pipe_bufs without …

Apr 16, 2025
CVE-2025-23137
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update Check if policy is NULL before dereferencing …

Apr 16, 2025
CVE-2025-23136
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode, …

Apr 16, 2025
CVE-2025-23135
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvm_exit During a module removal, kvm_exit invokes arch …

Apr 16, 2025
CVE-2025-23134
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take register_mutex with copy_from/to_user() The infamous mmap_lock taken in copy_from/to_user() can be …

Apr 16, 2025
CVE-2025-23133
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets …

Apr 16, 2025
CVE-2025-23132
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquot_writeback_dquots() F2FS-fs (dm-59): checkpoint=enable has some unwritten data. …

Apr 16, 2025
CVE-2025-23131
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to event_done do_uevent returns the value written …

Apr 16, 2025
CVE-2025-23130
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug …

Apr 16, 2025
CVE-2025-23129
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path If a shared IRQ …

Apr 16, 2025
CVE-2025-22128
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path If a shared IRQ …

Apr 16, 2025
CVE-2025-22127
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadloop in prepare_compress_overwrite() Jan Prusakowski reported a kernel hang issue as below: …

Apr 16, 2025
CVE-2025-22126
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md_notify_reboot() and …

Apr 16, 2025
CVE-2025-22125
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid …

Apr 16, 2025
CVE-2025-22124
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb In clustermd, separate write-intent-bitmaps are used …

Apr 16, 2025
CVE-2025-22123
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid accessing uninitialized curseg syzbot reports a f2fs bug as below: F2FS-fs …

Apr 16, 2025
CVE-2025-22122
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio >4GB folio is possible on some ARCHs, such as …

Apr 16, 2025
CVE-2025-22121
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: BUG: KASAN: use-after-free in ext4_xattr_inode_dec_ref_all+0x6ff/0x790 …

Apr 16, 2025
CVE-2025-22120
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ext4: goto right label 'out_mmap_sem' in ext4_setattr() Otherwise, if ext4_inode_attach_jinode() fails, a hung task will …

Apr 16, 2025
CVE-2025-22119
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: init wiphy_work before allocating rfkill fails syzbort reported a uninitialize wiphy_work_lock in cfg80211_dev_free. …

Apr 16, 2025
CVE-2025-22118
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: ice: validate queue quanta parameters to prevent OOB access Add queue wraparound prevention in quanta …

Apr 16, 2025
CVE-2025-22117
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() Fix using the untrusted value of …

Apr 16, 2025
CVE-2025-22116
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: idpf: check error for register_netdev() on init Current init logic ignores the error code from …

Apr 16, 2025
CVE-2025-22115
4.7 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() Block group creation is done in two …

Apr 16, 2025
CVE-2025-22114
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't clobber ret in btrfs_validate_super() Commit 2a9bb78cfd36 ("btrfs: validate system chunk array at btrfs_validate_super()") …

Apr 16, 2025
CVE-2025-22113
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid journaling sb update on error if journal is destroying Presently we always BUG_ON …

Apr 16, 2025
CVE-2025-22112
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnic_info array The bnxt_queue_{start | stop}() access vnic_info as …

Apr 16, 2025
CVE-2025-22111
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to dev_ioctl() first and …

Apr 16, 2025
CVE-2025-22110
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error It is possible that ctx in …

Apr 16, 2025
CVE-2025-22109
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ax25: Remove broken autobind Binding AX25 socket by using the autobind feature leads to memory …

Apr 16, 2025
CVE-2025-22108
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Mask the bd_cnt field in the TX BD properly The bd_cnt field in the …

Apr 16, 2025
CVE-2025-22107
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() There are actually 2 problems: - …

Apr 16, 2025
CVE-2025-22106
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: vmxnet3: unregister xdp rxq info in the reset path vmxnet3 does not unregister xdp rxq …

Apr 16, 2025
CVE-2025-22105
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning[1]: ip …

Apr 16, 2025
CVE-2025-22104
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, …

Apr 16, 2025
CVE-2025-22103
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer dereference in l3mdev_l3_rcv When delete l3s ipvlan: ip link del link …

Apr 16, 2025
CVE-2025-22102
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix kernel panic during FW release This fixes a kernel panic seen during …

Apr 16, 2025
CVE-2025-22101
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix Tx L4 checksum The hardware only supports L4 checksum offload for TCP/UDP/SCTP …

Apr 16, 2025
CVE-2025-22100
4.7 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race condition when gathering fdinfo group samples Commit e16635d88fa0 ("drm/panthor: add DRM fdinfo …

Apr 16, 2025
CVE-2025-22099
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init devm_kasprintf() calls can return null pointers on …

Apr 16, 2025
CVE-2025-22098
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dp: Fix a deadlock in zynqmp_dp_ignore_hpd_set() Instead of attempting the same mutex twice, lock …

Apr 16, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.