CVE Database

145766+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2025-38417
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in …

Jul 25, 2025
CVE-2025-38416
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before opening the NCI …

Jul 25, 2025
CVE-2025-38415
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-of-bounds in squashfs_bio_read" bug. Syzkaller …

Jul 25, 2025
CVE-2025-38414
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wrongly defined for WCN7850, causing kernel …

Jul 25, 2025
CVE-2025-38413
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check When calling buf_to_xdp, the len argument is …

Jul 25, 2025
CVE-2025-38412
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks …

Jul 25, 2025
CVE-2025-38411
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, …

Jul 25, 2025
CVE-2025-38410
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we could unref …

Jul 25, 2025
CVE-2025-38409
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doesn't free the installed file, …

Jul 25, 2025
CVE-2025-38408
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `ops` member's pointers properly by using kzalloc() instead …

Jul 25, 2025
CVE-2025-38407
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data Since commit 6b9f29b81b15 ("riscv: Enable pcpu page first …

Jul 25, 2025
CVE-2025-38406
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's …

Jul 25, 2025
CVE-2025-38405
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is …

Jul 25, 2025
CVE-2025-38404
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive lock …

Jul 25, 2025
CVE-2025-38403
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transport_packet_init memset the vmci_transport_packet …

Jul 25, 2025
CVE-2025-8157
6.3 MEDIUM

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part …

Jul 25, 2025
CVE-2025-8156
6.3 MEDIUM

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3 and classified as critical. Affected by this issue is some unknown …

Jul 25, 2025
CVE-2025-51411
6.1 MEDIUM

A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The application fails to properly sanitize user …

Jul 25, 2025
CVE-2025-43712
2.9 LOW

JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter. Upon registering in the JHipster portal and logging in as a standard user, the …

Jul 25, 2025
CVE-2025-38402
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning …

Jul 25, 2025
CVE-2025-38401
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to map the DMA …

Jul 25, 2025
CVE-2025-38400
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warning below [1] following a …

Jul 25, 2025
CVE-2025-38399
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The function core_scsi3_decode_spec_i_port(), in its error code …

Jul 25, 2025
CVE-2025-38398
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: reallocate BAM transactions Using the mtd_nandbiterrs module for testing the driver occasionally results …

Jul 25, 2025
CVE-2025-38397
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in …

Jul 25, 2025
CVE-2025-38396
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_make_secure_inode() to allow KVM guest_memfd to …

Jul 25, 2025
CVE-2025-38395
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an array …

Jul 25, 2025
CVE-2025-38394
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of input_handler_list In appletb_kbd_probe an input handler is initialised and …

Jul 25, 2025
CVE-2025-38393
4.7 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung …

Jul 25, 2025
CVE-2025-38392
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2_CAP_MACFILTER enabled, the following warning is …

Jul 25, 2025
CVE-2025-38391
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin_assignments A poorly implemented DisplayPort Alt Mode port …

Jul 25, 2025
CVE-2025-38390
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix memory leak by freeing notifier callback node Commit e0573444edbf ("firmware: arm_ffa: Add …

Jul 25, 2025
CVE-2025-38389
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix timeline left held on VMA alloc error The following error has been reported …

Jul 25, 2025
CVE-2025-38388
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context The current use …

Jul 25, 2025
CVE-2025-38387
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert The obj_event may be loaded immediately after inserted, then if …

Jul 25, 2025
CVE-2025-38386
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a …

Jul 25, 2025
CVE-2025-38385
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Remove redundant netif_napi_del() call from disconnect …

Jul 25, 2025
CVE-2025-38384
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine …

Jul 25, 2025
CVE-2025-38383
4.7 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in show_numa_info() The following data-race was found in show_numa_info(): ================================================================== BUG: …

Jul 25, 2025
CVE-2025-38382
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix iteration of extrefs during log replay At __inode_add_ref() when processing extrefs, if we …

Jul 25, 2025
CVE-2025-38381
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() The cs40l50_upload_owt() function allocates memory via …

Jul 25, 2025
CVE-2025-38380

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Jul 25, 2025
CVE-2025-38379
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2_reconnect_server(), a dummy …

Jul 25, 2025
CVE-2025-38378
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe In probe appletb_kbd_probe() a "struct appletb_kbd *kbd" …

Jul 25, 2025
CVE-2025-38377
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose_rt_device_down() that can …

Jul 25, 2025
CVE-2025-38376
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume Shawn and John reported a hang …

Jul 25, 2025
CVE-2025-38375
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the …

Jul 25, 2025
CVE-2025-38374
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-TEE driver registers the function notif_callback() for …

Jul 25, 2025
CVE-2025-38373
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc() is invoked while …

Jul 25, 2025
CVE-2025-38372
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling __xa_store() and __xa_erase() were used without …

Jul 25, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.