KATALOG PODATNOŚCI
Wyszukuj po identyfikatorze CVE, nazwie produktu lub opisie. Filtruj według sygnałów ryzyka.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV.
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If map_addr() changes the packet length, such as when the public NAT IP string is shorter or longer than…
In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-device RX handler has already been registered (slave A is added before the failable slave…
In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for extent conversion") was correct to note that we need to reserve enough…
Błąd w jądrze Linuxa dotyczący BPF_REFCOUNT może prowadzić do nieprawidłowego zarządzania pamięcią.
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package
A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via…
A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multiple_locations configuration option is enabled in glance-api.conf, an authenticated attacker can manipulate the locations attribute of an…
Błąd w kernelu Linux pozwalał na cichą truncację wartości poll_msec, co mogło prowadzić do wysokiego zużycia CPU.
Błąd w jądrze Linuxa prowadzi do paniki systemu przy przetwarzaniu uszkodzonych ramek PPP.
Błąd w jądrze Linuxa w module mt76 pozwala na przepełnienie bufora przez złośliwe firmware.
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose command_count is zero passes the payload length check, because struct_size(payload, data, 0) is just the…
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct amdxdna_cmd_chain contains a flexible array annotated with __counted_by(command_count). Since the structure is…
In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since __kthread_create_on_node() returns -EINTR upon SIGKILL, we should not use WARN_ON() in order to catch kthread_run() failure.
In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The rotation argument to drm_plane_create_rotation_property() is set to DRM_MODE_ROTATE_0, and the device reported…
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an example: r0 = bpf_map_lookup_elem(...) /* PTR_TO_MAP_VALUE, offset 0…
Wyciekanie kolejek w jądrze Linuxa przy przekroczeniu limitu backlogu prowadzi do utraty zasobów.
In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and therefore prone to races. It populates head->nr_plids/head->plids for fdp registration. But…
In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfs_dio_zero_range() returns either 0 or a negative errno from blkdev_issue_zeroout(); it never returns a positive value.…
In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when errors were recorded ntfs_put_super() and the remount-read-only path both clear the dirty bit only when NVolErrors(vol) is false.…
In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters ntfs_cluster_free_from_rl_nolock() adds a run's length to nr_freed whenever the error bookkeeping condition is false, which…
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths write_mft_record_nolock() maps the MFT record folio with kmap_local_folio(), but the pre_write_mst_fixup()…
In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_index(). When index insertion fails, the code removes the just-written reparse…
Błąd w sterowniku cirrus-qemu w jądrze Linuxa umożliwia przepełnienie bufora i wywołanie błędu strony.
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error() looks up the first BO of a command chain, which takes a reference, and drops it at the end of the function.…
In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does not check if the new file size (i_size + len) is valid. This allows FALLOC_FL_INSERT_RANGE to bypass RLIMIT_FSIZE,…
| CVE / produkt | Sygnały | Oceny | Publikacja | Zapisz |
|---|---|---|---|---|
| CVE-2026-100070 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet sashiko says: If map_addr() changes the packet… |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-100071 In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-device RX handler… |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-100073 In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-100074 Błąd w jądrze Linuxa dotyczący BPF_REFCOUNT może prowadzić do nieprawidłowego zarządzania pamięcią. |
Pozostałe |
CVSS 5,5EPSS 0,16 % | ||
| CVE-2026-78902 Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package |
Pozostałe |
CVSS 6,1EPSS 0,28 % | ||
| CVE-2026-88420 A reflected cross-site scripting (XSS) vulnerability in the EntryAbstract.save() component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges… |
Pozostałe |
CVSS 5,4EPSS 0,19 % | ||
| CVE-2026-51772 A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_multiple_locations configuration option is enabled in glance-api.conf, an… |
Pozostałe |
CVSS 6,5EPSS 0,3 % | ||
| CVE-2026-98157 Błąd w kernelu Linux pozwalał na cichą truncację wartości poll_msec, co mogło prowadzić do wysokiego zużycia CPU. |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98158 Błąd w jądrze Linuxa prowadzi do paniki systemu przy przetwarzaniu uszkodzonych ramek PPP. |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98159 Błąd w jądrze Linuxa w module mt76 pozwala na przepełnienie bufora przez złośliwe firmware. |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98145 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject a command chain that carries no commands A chain whose command_count is zero passes the payload… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-98146 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain struct amdxdna_cmd_chain contains a flexible array… |
Pozostałe |
CVSS 5,5EPSS 0,09 % | ||
| CVE-2026-98147 In the Linux kernel, the following vulnerability has been resolved: printk: Don't WARN on kthread_run failure. Since __kthread_create_on_node() returns -EINTR upon SIGKILL, we should not… |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98148 In the Linux kernel, the following vulnerability has been resolved: drm/gud: validate GUD_ROTATION_0 is present in supported rotations The rotation argument to… |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98151 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Take the following unprivileged program as an… |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98152 Wyciekanie kolejek w jądrze Linuxa przy przekroczeniu limitu backlogu prowadzi do utraty zasobów. |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98153 In the Linux kernel, the following vulnerability has been resolved: nvme: fix racy access to FDP placement id array nvme_query_fdp_info() is called per-path and therefore prone to… |
Pozostałe |
CVSS 5,5EPSS 0,08 % | ||
| CVE-2026-98137 In the Linux kernel, the following vulnerability has been resolved: ntfs: treat any nonzero dio zero-range return as an error ntfs_dio_zero_range() returns either 0 or a negative errno… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-98138 In the Linux kernel, the following vulnerability has been resolved: ntfs: do not mark the volume clean in sync_fs when errors were recorded ntfs_put_super() and the remount-read-only… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-98139 In the Linux kernel, the following vulnerability has been resolved: ntfs: only count successfully cleared runs when freeing clusters ntfs_cluster_free_from_rl_nolock() adds a run's… |
Pozostałe |
CVSS 5,5EPSS 0,13 % | ||
| CVE-2026-98140 In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmap_local leak in write_mft_record_nolock() error paths write_mft_record_nolock() maps the MFT record folio… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-98141 In the Linux kernel, the following vulnerability has been resolved: ntfs: propagate reparse index insertion failure update_reparse_data() ignores the return value of set_reparse_index().… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-98142 Błąd w sterowniku cirrus-qemu w jądrze Linuxa umożliwia przepełnienie bufora i wywołanie błędu strony. |
Pozostałe |
CVSS 5,5EPSS 0,11 % | ||
| CVE-2026-98144 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: put the chained BO when its mapping fails amdxdna_cmd_set_error() looks up the first BO of a command… |
Pozostałe |
CVSS 5,5EPSS 0,1 % | ||
| CVE-2026-98127 In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3_insert_range() does not check if the new file size (i_size + len)… |
Pozostałe |
CVSS 5,5EPSS 0,13 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 5.11.2026, 23:02 UTC – 6.11.2026, 00:32 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.