Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-4373 | 4.8 medium | 1.0% | red hat, red hat enterprise linux 10, red hat enterprise linux 8, red hat enterprise linux 8.2 advanced update support | A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite. | 23 h ago |
| CVE-2025-46397 | 7.8 high | — | red hat, red hat enterprise linux 8, red hat enterprise linux 9, red hat enterprise linux 9.4 extended update support | A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spline function. | 8 h ago |
| CVE-2023-6531 | 7.0 high | 0.00% | red hat, red hat enterprise linux 9, red hat enterprise linux 6, red hat enterprise linux 7 | A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unix_stream_read_generic() on the socket that the SKB is queued on. | 23 h ago |
| CVE-2026-13595 | 6.8 medium | 0.00% | red hat, red hat enterprise linux 10, red hat hardened images, red hat enterprise linux 7 | A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers cache a raw pointer to a parent partition entry in a dynamically allocated array. When subsequent partition additions cause the array to be reallocated, this pointer becomes stale, leading to a heap use-after-free read. An attacker who can present a crafted block device image (for example, via USB insertion or a loop-mounted disk image) can trigger this flaw without user interaction, as libblkid is invoked automatically by udev/udisks as root on block-device hot-plug events. This could lead to limited information disclosure or denial of service. | 4 h ago |
| CVE-2026-14330 | 5.5 medium | 0.00% | red hat, red hat enterprise linux 10, red hat enterprise linux 9, red hat enterprise linux 8 | Multiple unbounded alloca() calls in the PulseAudio protocol server. | 4 h ago |
| CVE-2023-42756 | 4.4 medium | 0.00% | red hat, red hat enterprise linux 9, red hat enterprise linux 6, red hat enterprise linux 7 | A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to the invocation of `__ip_set_put` on a wrong `set`. This issue may allow a local user to crash the system. | 23 h ago |
| CVE-2026-3234 | 4.3 medium | — | red hat, red hat enterprise linux 10, red hat enterprise linux 9, red hat jboss core services | A flaw was found in mod_proxy_cluster. This vulnerability, a Carriage Return Line Feed (CRLF) injection in the decodeenc() function, allows a remote attacker to bypass input validation. By injecting CRLF sequences into the cluster configuration, an attacker can corrupt the response body of INFO endpoint responses. Exploitation requires network access to the MCMP protocol port, but no authentication is needed. | 8 h ago |
7 of 7
Download these 7 as CSV · subscribe to this list.
EPSS scores: 2026-11-01. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.