1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 16, 2026, 1:25 PM 20,344 active 1,448 known exploited

Catalog summary

20,344

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 16, 2026, 1:25 PM 20,344 active 1,448 known exploited

Catalog summary

20,344

Active CVEs

10,153

Critical + high

1,448

Known exploited

14

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 14,201–14,250 of 20,344 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-39689Unknown severity
    ftrace: Also allocate and copy hash for reading of filter files
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  2. CVE-2025-39683Unknown severity
    tracing: Limit access to parser->buffer when trace_get_user failed
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  3. CVE-2025-39682Unknown severity
    tls: fix handling of zero-length records on the rx_list
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  4. CVE-2025-39681Medium
    x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  5. CVE-2025-39680Unknown severity
    i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  6. CVE-2025-39677Unknown severity
    net/sched: Fix backlog accounting in qdisc_dequeue_internal
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2025-39673Unknown severity
    ppp: fix race conditions in ppp_fill_forward_path
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  8. CVE-2025-38737Unknown severity
    cifs: Fix oops due to uninitialised variable
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  9. CVE-2025-38736High
    net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
    CVSS 7.1
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  10. CVE-2025-38735Unknown severity
    gve: prevent ethtool ops after shutdown
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  11. CVE-2025-38734Unknown severity
    net/smc: fix UAF on smcsk after smc_listen_out()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2025-38733Unknown severity
    s390/mm: Do not map lowcore with identity mapping
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  13. CVE-2025-38732Medium
    netfilter: nf_reject: don't leak dst refcount for loopback packets
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  14. CVE-2025-38731Unknown severity
    drm/xe: Fix vm_bind_ioctl double free bug
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2025-48543High
    CISA ADP Vulnrichment
    Not scored Known exploited
    Google/Androidgeneric
    PublishedSep 4, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026View HOL analysis
  16. CVE-2025-38730Unknown severity
    io_uring/net: commit partial buffers on retry
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  17. CVE-2025-38728Unknown severity
    smb3: fix for slab out of bounds on mount to ksmbd
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  18. CVE-2025-38727Medium
    netlink: avoid infinite retry looping in netlink_unicast()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  19. CVE-2025-38725Medium
    net: usb: asix_devices: add phy_mask for ax88772 mdio bus
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  20. CVE-2025-38724Unknown severity
    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  21. CVE-2025-38722Unknown severity
    habanalabs: fix UAF in export_dmabuf()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  22. CVE-2025-38721Medium
    netfilter: ctnetlink: fix refcount leak on table dump
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  23. CVE-2025-38718Unknown severity
    sctp: linearize cloned gso packets in sctp_rcv
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  24. CVE-2025-38717Unknown severity
    net: kcm: Fix race condition in kcm_unattach()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  25. CVE-2025-38715Unknown severity
    hfs: fix slab-out-of-bounds in hfs_bnode_read()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  26. CVE-2025-38714Unknown severity
    hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  27. CVE-2025-38713Unknown severity
    hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2025-38710Unknown severity
    gfs2: Validate i_depth for exhash directories
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2025-38708Unknown severity
    drbd: add missing kref_get in handle_write_conflicts
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2025-38707Unknown severity
    fs/ntfs3: Add sanity check for file name
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2025-38704High
    rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  32. CVE-2025-38703Unknown severity
    drm/xe: Make dma-fences compliant with the safe access rules
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  33. CVE-2025-38702Unknown severity
    fbdev: fix potential buffer overflow in do_register_framebuffer()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  34. CVE-2025-38701Unknown severity
    ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  35. CVE-2025-38697Unknown severity
    jfs: upper bound check of tree index in dbAllocAG
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  36. CVE-2025-38691Unknown severity
    pNFS: Fix uninited ptr deref in block/scsi layout
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2025-38688Unknown severity
    iommufd: Prevent ALIGN() overflow
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2025-38687Unknown severity
    comedi: fix race between polling and detaching
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  39. CVE-2025-38685Unknown severity
    fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2025-38681Medium
    mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
    CVSS 4.7
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  41. CVE-2025-38679Unknown severity
    media: venus: Fix OOB read due to missing payload bound check
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  42. CVE-2025-53690High
    Sitecore Products ViewState Deserialization Vulnerability
    Not scored Known exploited
    Sitecore/Experience Manager (XM), Sitecore/Experience Platform (XP)generic
    PublishedSep 3, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026View HOL analysis
  43. CVE-2025-38678Unknown severity
    netfilter: nf_tables: reject duplicate device on updates
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2025-9901Medium
    Libsoup: improper handling of http vary header in libsoup caching
    CVSS 5.9
    Affected software not mappedEcosystem not listed
    PublishedSep 3, 2025First seen at HOL Jun 25, 2026Updated Jun 30, 2026View HOL analysis
  45. CVE-2024-48705Medium
    CISA ADP Vulnrichment
    CVSS 6.5
    n/a/n/ageneric
    PublishedSep 2, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  46. CVE-2025-55373Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    n/a/n/ageneric
    PublishedSep 2, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  47. CVE-2025-38677Unknown severity
    f2fs: fix to avoid out-of-boundary access in dnode page
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedAug 30, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2025-9377High
    Authenticated RCE via Parental Control command injection
    Not scored Known exploited
    TP-Link Systems Inc./Archer C7(EU) V2, TP-Link Systems Inc./TL-WR841N/ND(MS) V9generic
    PublishedAug 29, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026 Fix availableView HOL analysis
  49. CVE-2025-55177High
    CISA ADP Vulnrichment
    Not scored Known exploited
    Facebook/WhatsApp Business for iOS, Facebook/WhatsApp Desktop for Mac +1generic
    PublishedAug 29, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026 Fix availableView HOL analysis
  50. CVE-2024-46484Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    n/a/n/ageneric
    PublishedAug 29, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
Page 285 of 407
Previous283284285286287Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

10,153

Critical + high

1,448

Known exploited

14

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 14,201–14,250 of 20,344 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2025-39689Unknown severity
    ftrace: Also allocate and copy hash for reading of filter files
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  2. CVE-2025-39683Unknown severity
    tracing: Limit access to parser->buffer when trace_get_user failed
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  3. CVE-2025-39682Unknown severity
    tls: fix handling of zero-length records on the rx_list
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  4. CVE-2025-39681Medium
    x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  5. CVE-2025-39680Unknown severity
    i2c: rtl9300: Fix out-of-bounds bug in rtl9300_i2c_smbus_xfer
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  6. CVE-2025-39677Unknown severity
    net/sched: Fix backlog accounting in qdisc_dequeue_internal
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  7. CVE-2025-39673Unknown severity
    ppp: fix race conditions in ppp_fill_forward_path
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  8. CVE-2025-38737Unknown severity
    cifs: Fix oops due to uninitialised variable
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  9. CVE-2025-38736High
    net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
    CVSS 7.1
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  10. CVE-2025-38735Unknown severity
    gve: prevent ethtool ops after shutdown
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  11. CVE-2025-38734Unknown severity
    net/smc: fix UAF on smcsk after smc_listen_out()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2025-38733Unknown severity
    s390/mm: Do not map lowcore with identity mapping
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  13. CVE-2025-38732Medium
    netfilter: nf_reject: don't leak dst refcount for loopback packets
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 5, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  14. CVE-2025-38731Unknown severity
    drm/xe: Fix vm_bind_ioctl double free bug
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 5, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  15. CVE-2025-48543High
    CISA ADP Vulnrichment
    Not scored Known exploited
    Google/Androidgeneric
    PublishedSep 4, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026View HOL analysis
  16. CVE-2025-38730Unknown severity
    io_uring/net: commit partial buffers on retry
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  17. CVE-2025-38728Unknown severity
    smb3: fix for slab out of bounds on mount to ksmbd
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  18. CVE-2025-38727Medium
    netlink: avoid infinite retry looping in netlink_unicast()
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  19. CVE-2025-38725Medium
    net: usb: asix_devices: add phy_mask for ax88772 mdio bus
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  20. CVE-2025-38724Unknown severity
    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  21. CVE-2025-38722Unknown severity
    habanalabs: fix UAF in export_dmabuf()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  22. CVE-2025-38721Medium
    netfilter: ctnetlink: fix refcount leak on table dump
    CVSS 5.5
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  23. CVE-2025-38718Unknown severity
    sctp: linearize cloned gso packets in sctp_rcv
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  24. CVE-2025-38717Unknown severity
    net: kcm: Fix race condition in kcm_unattach()
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  25. CVE-2025-38715Unknown severity
    hfs: fix slab-out-of-bounds in hfs_bnode_read()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  26. CVE-2025-38714Unknown severity
    hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  27. CVE-2025-38713Unknown severity
    hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  28. CVE-2025-38710Unknown severity
    gfs2: Validate i_depth for exhash directories
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2025-38708Unknown severity
    drbd: add missing kref_get in handle_write_conflicts
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  30. CVE-2025-38707Unknown severity
    fs/ntfs3: Add sanity check for file name
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  31. CVE-2025-38704High
    rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
    CVSS 7.8
    Linux/Linux, Siemens/SIMATIC S7-1500 CPU 1518-4 PN/DP MFP +2generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  32. CVE-2025-38703Unknown severity
    drm/xe: Make dma-fences compliant with the safe access rules
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  33. CVE-2025-38702Unknown severity
    fbdev: fix potential buffer overflow in do_register_framebuffer()
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  34. CVE-2025-38701Unknown severity
    ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  35. CVE-2025-38697Unknown severity
    jfs: upper bound check of tree index in dbAllocAG
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  36. CVE-2025-38691Unknown severity
    pNFS: Fix uninited ptr deref in block/scsi layout
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 6, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  37. CVE-2025-38688Unknown severity
    iommufd: Prevent ALIGN() overflow
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  38. CVE-2025-38687Unknown severity
    comedi: fix race between polling and detaching
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  39. CVE-2025-38685Unknown severity
    fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  40. CVE-2025-38681Medium
    mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
    CVSS 4.7
    Linux/Linux, Siemens/SIMATIC CN 4100 +3generic
    PublishedSep 4, 2025First seen at HOL Jul 14, 2026Updated Jul 14, 2026 Fix availableView HOL analysis
  41. CVE-2025-38679Unknown severity
    media: venus: Fix OOB read due to missing payload bound check
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedSep 4, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  42. CVE-2025-53690High
    Sitecore Products ViewState Deserialization Vulnerability
    Not scored Known exploited
    Sitecore/Experience Manager (XM), Sitecore/Experience Platform (XP)generic
    PublishedSep 3, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026View HOL analysis
  43. CVE-2025-38678Unknown severity
    netfilter: nf_tables: reject duplicate device on updates
    Not scoredSource severity not reported
    Linux/Linuxgeneric
    PublishedSep 3, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  44. CVE-2025-9901Medium
    Libsoup: improper handling of http vary header in libsoup caching
    CVSS 5.9
    Affected software not mappedEcosystem not listed
    PublishedSep 3, 2025First seen at HOL Jun 25, 2026Updated Jun 30, 2026View HOL analysis
  45. CVE-2024-48705Medium
    CISA ADP Vulnrichment
    CVSS 6.5
    n/a/n/ageneric
    PublishedSep 2, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  46. CVE-2025-55373Medium
    CISA ADP Vulnrichment
    CVSS 5.3
    n/a/n/ageneric
    PublishedSep 2, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
  47. CVE-2025-38677Unknown severity
    f2fs: fix to avoid out-of-boundary access in dnode page
    Not scoredSource severity not reported
    Linux/Linux, Siemens/SIMATIC CN 4100generic
    PublishedAug 30, 2025First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  48. CVE-2025-9377High
    Authenticated RCE via Parental Control command injection
    Not scored Known exploited
    TP-Link Systems Inc./Archer C7(EU) V2, TP-Link Systems Inc./TL-WR841N/ND(MS) V9generic
    PublishedAug 29, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026 Fix availableView HOL analysis
  49. CVE-2025-55177High
    CISA ADP Vulnrichment
    Not scored Known exploited
    Facebook/WhatsApp Business for iOS, Facebook/WhatsApp Desktop for Mac +1generic
    PublishedAug 29, 2025First seen at HOL May 24, 2026Updated Feb 26, 2026 Fix availableView HOL analysis
  50. CVE-2024-46484Critical
    CISA ADP Vulnrichment
    CVSS 9.8
    n/a/n/ageneric
    PublishedAug 29, 2025First seen at HOL Jul 5, 2026Updated Jul 5, 2026View HOL analysis
Page 285 of 407
Previous283284285286287Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard