CVE Database

145766+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2025-38300
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix two DMA cleanup issues on the …

Jul 10, 2025
CVE-2025-38299
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() ETDM2_IN_BE and ETDM1_OUT_BE are defined as COMP_EMPTY(), …

Jul 10, 2025
CVE-2025-38298
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault After loading i10nm_edac (which automatically loads skx_edac_common), if unload only …

Jul 10, 2025
CVE-2025-38297
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of a non-CPU …

Jul 10, 2025
CVE-2025-38296
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: ACPI: platform_profile: Avoid initializing on non-ACPI platforms The platform profile driver is loaded even on …

Jul 10, 2025
CVE-2025-38295
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() The Amlogic DDR PMU driver meson_ddr_pmu_create() function incorrectly …

Jul 10, 2025
CVE-2025-38294
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL access in assign channel context handler Currently, when ath12k_mac_assign_vif_to_vdev() fails, the …

Jul 10, 2025
CVE-2025-38293
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath11k_core_halt() …

Jul 10, 2025
CVE-2025-38292
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetched from skb and …

Jul 10, 2025
CVE-2025-38291
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we encounter the …

Jul 10, 2025
CVE-2025-38290
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery code flow, ath12k_core_halt() …

Jul 10, 2025
CVE-2025-38289
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a potential use-after-free of an …

Jul 10, 2025
CVE-2025-38288
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels Correct kernel call trace when calling …

Jul 10, 2025
CVE-2025-38287
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can …

Jul 10, 2025
CVE-2025-38286
7.1 HIGH

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that given OF alias is not …

Jul 10, 2025
CVE-2025-38285
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: CPU: 3 PID: 5971 at …

Jul 10, 2025
CVE-2025-38284
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mode via PCI config API only To support 36-bit …

Jul 10, 2025
CVE-2025-38283
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF device driver is …

Jul 10, 2025
CVE-2025-38282
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the break/unbreak mechanism but …

Jul 10, 2025
CVE-2025-38281
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init devm_kasprintf() can return a NULL pointer on …

Jul 10, 2025
CVE-2025-38280
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid __bpf_prog_ret0_warn when jit fails syzkaller reported an issue: WARNING: CPU: 3 PID: 217 …

Jul 10, 2025
CVE-2025-38279
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai reported an …

Jul 10, 2025
CVE-2025-38278
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses below issues, 1. Active traffic on the …

Jul 10, 2025
CVE-2025-38277
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zero, the loop …

Jul 10, 2025
CVE-2025-38276
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix "don't skip locked entries when scanning entries" Commit 6be3e21d25ca ("fs/dax: don't skip locked …

Jul 10, 2025
CVE-2025-38275
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function currently returns the …

Jul 10, 2025
CVE-2025-38274
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr_test_img_load_sgt() allocates memory for sgt using kunit_kzalloc() …

Jul 10, 2025
CVE-2025-38273
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix refcount warning in tipc_aead_encrypt syzbot reported a refcount warning [1] caused by …

Jul 10, 2025
CVE-2025-38272
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches do not support …

Jul 10, 2025
CVE-2025-38271
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnl_create_link() At the time rtnl_create_link() is running, dev->netdev_ops is …

Jul 10, 2025
CVE-2025-38270
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from netpoll netdevsim supports netpoll. Make sure we don't call …

Jul 10, 2025
CVE-2025-38269
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() If insert_state() state failed it returns an …

Jul 10, 2025
CVE-2025-38268
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work A state check was previously added to …

Jul 10, 2025
CVE-2025-38267
7.8 HIGH

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not trigger WARN_ON() due to a commit_overrun When reading a memory mapped buffer …

Jul 10, 2025
CVE-2025-38266
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms Commit 3ef9f710efcb ("pinctrl: mediatek: Add …

Jul 10, 2025
CVE-2025-38265
5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: serial: jsm: fix NPE during jsm_uart_port_init No device was set which caused serial_base_ctrl_add to crash. …

Jul 10, 2025
CVE-2025-32989
5.3 MEDIUM

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This …

Jul 10, 2025
CVE-2025-32988
6.5 MEDIUM

A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name …

Jul 10, 2025
CVE-2025-7387
5.5 MEDIUM

The Lana Downloads Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the endpoint parameters in versions up to, and including, 1.10.0 due …

Jul 10, 2025
CVE-2025-6236
4.8 MEDIUM

The Hostel WordPress plugin before 1.1.5.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to …

Jul 10, 2025
CVE-2025-6234
6.1 MEDIUM

The Hostel WordPress plugin before 1.1.5.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site …

Jul 10, 2025
CVE-2023-50458
3.5 LOW

In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.

Jul 10, 2025
CVE-2025-53753

Rejected reason: Not used

Jul 10, 2025
CVE-2025-53752

Rejected reason: Not used

Jul 10, 2025
CVE-2025-53751

Rejected reason: Not used

Jul 10, 2025
CVE-2025-53750

Rejected reason: Not used

Jul 10, 2025
CVE-2025-53749

Rejected reason: Not used

Jul 10, 2025
CVE-2025-53748

Rejected reason: Not used

Jul 10, 2025
CVE-2025-53747

Rejected reason: Not used

Jul 10, 2025
CVE-2025-53746

Rejected reason: Not used

Jul 10, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.