{"kind": "product", "path": "vulns/debian-12/xen", "name": "xen", "product": "xen", "ecosystem": "Debian:12", "items": [{"id": "CVE-2026-102700", "noindex": false, "published": "2026-10-13T15:45:27.794Z", "modified": "2026-10-20T17:16:15.958Z", "cvss": 4.7, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00148, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-102700", "title": "gnttab: cache-flush handling may cause page reference leak", "description": "With its original introduction, GNTTAB_cache_flush was made available\nuniformly.  XSA-232 (CVE-2017-14318) then covered an omitted NULL\npointer check, yet the addition of that check failed to adjust the\nsubsequent error path.  That error path fails to drop a page reference in\ncase the specified page is owned by a special system domain (DOM_IO and\nDOM_COW are system domains which can have memory pages assigned to them.)", "references": ["https://xenbits.xenproject.org/xsa/advisory-520.html", "http://xenbits.xen.org/xsa/advisory-520.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102700"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-102702", "noindex": false, "published": "2026-10-13T15:45:13.125Z", "modified": "2026-10-20T17:28:13.480Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00292, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-102702", "title": "Arm: multiple issues with GNTTABOP_cache_flush", "description": "[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing caches through\n   GNTTABOP_cache_flush.  Unfortunately the fix there introduced a\n   calculation which may underflow, resulting in a loop which would - at\n   least on 64-bit Arm - take excessively long, and which would likely\n   eventually crash the hypervisor.\n\n   This is CVE-2026-102699.\n\n2) GNTTABOP_cache_flush may be issued on memory mapped from another\n   domain using the grant table interface.  However t", "references": ["https://xenbits.xenproject.org/xsa/advisory-519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102702"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-102699", "noindex": false, "published": "2026-10-13T15:45:13.073Z", "modified": "2026-10-20T17:30:12.740Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00292, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-102699", "title": "Arm: multiple issues with GNTTABOP_cache_flush", "description": "[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing caches through\n   GNTTABOP_cache_flush.  Unfortunately the fix there introduced a\n   calculation which may underflow, resulting in a loop which would - at\n   least on 64-bit Arm - take excessively long, and which would likely\n   eventually crash the hypervisor.\n\n   This is CVE-2026-102699.\n\n2) GNTTABOP_cache_flush may be issued on memory mapped from another\n   domain using the grant table interface.  However t", "references": ["https://xenbits.xenproject.org/xsa/advisory-519.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-102699"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79611", "noindex": false, "published": "2026-10-13T15:44:56.361Z", "modified": "2026-10-20T17:31:41.971Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00161, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79611", "title": "VMX: VMentry failure with branch tracing and blocked states", "description": "For XSA-308 logic was introduced, as VMX VMEntry checks do not like the\nexact combination of state which occurs when #DB in intercepted, Single\nStepping is active, and blocked by STI/MovSS is active, despite this being\na legitimate state to be in.  The resulting VMEntry failure is fatal to\nthe guest.\n\nSadly there is another special sub-case of the above, with branch tracing\nenabled.  In that case the prior adjustment would still cause a VMentry\nfailure, as before fatal to the guest.", "references": ["https://xenbits.xenproject.org/xsa/advisory-518.html", "http://xenbits.xen.org/xsa/advisory-518.html", "http://www.openwall.com/lists/oss-security/2026/10/13/7"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79610", "noindex": false, "published": "2026-10-13T15:44:42.370Z", "modified": "2026-10-20T17:33:21.929Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.00148, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79610", "title": "grant-table: double version change race", "description": "XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain\nother grant table operations.  Sadly a v2 -> v1 -> v2 change has yet\nanother effect which wasn't accounted for: During the first change, status\npages would be freed.  During the second change they would be allocated\nagain.  Hence across the full pair of change the addresses of the status\npages may change, rendering stale previously calculated pointers into the\nstatus array.", "references": ["https://xenbits.xenproject.org/xsa/advisory-517.html", "http://xenbits.xen.org/xsa/advisory-517.html", "http://www.openwall.com/lists/oss-security/2026/10/13/6"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79609", "noindex": false, "published": "2026-10-13T15:44:24.763Z", "modified": "2026-10-20T17:34:39.462Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.00106, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79609", "title": "x86: XPTI may break on huge-memory systems", "description": "XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown\n(CVE-2017-5754, one aspect of XSA-254).  This involves copying 64-bit PV\nguest page table entries from guest-chosen root page tables to the Xen-\nchosen one which is in actual use by hardware.  To read the guest root\npage table, the directmap is used.  PV guests, however, have a directmap\nwhich may not cover all memory; in particular this is the case if any\nmemory extends beyond the 5 TiB (CONFIG_BIGMEM=y: 3.5 TiB) address\nboundary.", "references": ["https://xenbits.xenproject.org/xsa/advisory-516.html", "http://xenbits.xen.org/xsa/advisory-516.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-79609"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79608", "noindex": false, "published": "2026-10-13T15:44:08.729Z", "modified": "2026-10-20T17:36:56.453Z", "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.0035, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79608", "title": "x86/AMD: ineffectual Zenbleed workaround", "description": "The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later\nre-worked to better integrate with other manipulations of the same MSR.\nIn this rework an inverted conditional was introduced, resulting in the\nworkaround to not be applied when needed and vice versa.\n\nFor more details, see:\n  http://xenbits.xen.org/xsa/advisory-433.html", "references": ["https://xenbits.xenproject.org/xsa/advisory-515.html", "http://xenbits.xen.org/xsa/advisory-515.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-79608"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79607", "noindex": false, "published": "2026-10-13T15:43:43.425Z", "modified": "2026-10-16T18:36:50.515Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00123, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79607", "title": "Xenstore: Guests can crash xenstored during Live Update", "description": "During Xenstore live update the state record for a Xenstore watch with\nspecified watch depth is written with two bytes missing.  This results\nin an inconsistent state when reading the state back in the new Xenstore,\ncausing a crash of Xenstore or wrong Xenstore data.", "references": ["https://xenbits.xenproject.org/xsa/advisory-514.html", "http://xenbits.xen.org/xsa/advisory-514.html", "http://www.openwall.com/lists/oss-security/2026/10/13/3"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-102701", "noindex": false, "published": "2026-10-13T14:47:34.536380576Z", "modified": "2026-10-13T15:00:10.049759450Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-102701", "title": "DEBIAN-CVE-2026-102701", "description": "DEBIAN-CVE-2026-102701", "references": ["https://security-tracker.debian.org/tracker/CVE-2026-102701", "https://osv.dev/vulnerability/DEBIAN-CVE-2026-102701"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79603", "noindex": false, "published": "2026-09-08T12:11:21.789Z", "modified": "2026-09-08T17:08:33.807Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "severity": "medium", "epss": 0.00222, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79603", "title": "Unconditionally do TLB flushing ahead of page scrubbing", "description": "x86 PV guests can free memory pages while still keeping a stale TLB entry\npointing to them.  A TLB flush is only issued by Xen (if needed) when the\npage is re-used.  Since it's possible for the page to be scrubbed ahead of\nthe TLB flush, there's a window where a PV guest can modify an already\nscrubbed page.", "references": ["https://xenbits.xenproject.org/xsa/advisory-511.html", "http://xenbits.xen.org/xsa/advisory-511.html", "http://www.openwall.com/lists/oss-security/2026/09/08/8"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79602", "noindex": false, "published": "2026-09-08T12:11:08.534Z", "modified": "2026-09-10T18:08:59.554Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "severity": "high", "epss": 0.00125, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79602", "title": "x86: improper handling of HVM emulation return codes", "description": "A guest with a PCI device assigned that has at least a BAR on the IO port\nspace can trigger a BUG() in Xen.", "references": ["https://xenbits.xenproject.org/xsa/advisory-510.html", "http://xenbits.xen.org/xsa/advisory-510.html", "http://www.openwall.com/lists/oss-security/2026/09/08/7"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62437", "noindex": false, "published": "2026-09-08T12:10:52.643Z", "modified": "2026-09-10T18:13:23.073Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "severity": "medium", "epss": 0.00095, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62437", "title": "x86: DMs may cause mem leak by IRQ binding", "description": "When guests are terminated, various pieces of cleanup need carrying out.\nThe cleaning up of PCI devices which were assigned to guests, and the\nassociated removal of tracking structures for IRQs used by the devices\noccurs relatively early in the process.  Unfortunately after that point\nthe guest about to be terminated could cause its device model (DM) to\nre-establish such tracking structures, by having it bind one or more IRQs\nanew.  While some of those tracking structures would still be cleaned up\nlater on, at least one would not be.", "references": ["https://xenbits.xenproject.org/xsa/advisory-509.html", "http://xenbits.xen.org/xsa/advisory-509.html", "http://www.openwall.com/lists/oss-security/2026/09/08/6"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-79604", "noindex": false, "published": "2026-09-08T12:00:00Z", "modified": "2026-10-17T13:01:09.904918846Z", "cvss": null, "cvss_vector": "", "severity": "unknown", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-79604", "title": "UBUNTU-CVE-2026-79604", "description": "oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain.  When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored.  This can lead to a system-wide DoS. All version of Xen from 4.6 onwards are vulnerable. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable.", "references": ["https://ubuntu.com/security/CVE-2026-79604", "https://www.cve.org/CVERecord?id=CVE-2026-79604", "https://osv.dev/vulnerability/UBUNTU-CVE-2026-79604"], "fixes": [], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62434", "noindex": false, "published": "2026-07-28T12:33:08.540Z", "modified": "2026-07-28T16:33:34.668Z", "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "severity": "medium", "epss": 0.00377, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62434", "title": "PoD: Don't try to reclaim special pages", "description": "A guest started with Populated on Demand enabled (PoD) can attempt to\nreclaim pages which aren't regular guest RAM.  This can cause corruption\nof memory management state in Xen.", "references": ["https://xenbits.xenproject.org/xsa/advisory-507.html", "http://xenbits.xen.org/xsa/advisory-507.html", "http://www.openwall.com/lists/oss-security/2026/07/28/23"], "fixes": ["4.17.7-0+deb12u1"], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62433", "noindex": false, "published": "2026-07-28T12:32:59.802Z", "modified": "2026-07-28T16:33:33.573Z", "cvss": 7.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "severity": "high", "epss": 0.00253, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62433", "title": "correct buffer checks for DM_OP hypercalls", "description": "Parts of the DM_OP handling code assumes the caller has provided the\nrequired number of buffers for the given operation without any checking\nbeing done.  As a result, certain operations might access stack\nrubble as structures are possibly uninitialized.", "references": ["https://xenbits.xenproject.org/xsa/advisory-506.html", "http://xenbits.xen.org/xsa/advisory-506.html", "http://www.openwall.com/lists/oss-security/2026/07/28/22"], "fixes": ["4.17.7-0+deb12u1"], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62432", "noindex": false, "published": "2026-07-28T12:32:52.043Z", "modified": "2026-07-28T16:33:32.509Z", "cvss": 7.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "severity": "high", "epss": 0.00245, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62432", "title": "evtchn: Race between FIFO expand and reset", "description": "The EVTCHNOP_expand_array hypercall checks for whether FIFO event\nchannels are enabled, but without holding the correct lock.  It can race\nwith EVTCHNOP_reset, resulting in dereferencing a NULL pointer.", "references": ["https://xenbits.xenproject.org/xsa/advisory-505.html", "http://xenbits.xen.org/xsa/advisory-505.html", "http://www.openwall.com/lists/oss-security/2026/07/28/21"], "fixes": ["4.17.7-0+deb12u1"], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62431", "noindex": false, "published": "2026-07-28T12:32:43.849Z", "modified": "2026-07-28T16:33:31.447Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00361, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62431", "title": "Viridian STIMER division by zero", "description": "The logic to handle periodic Viridian STIMERs performs a division with an\nunchecked user-controlled divisor value, that can be set to zero to cause a #DE\nfault.", "references": ["https://xenbits.xenproject.org/xsa/advisory-504.html", "http://xenbits.xen.org/xsa/advisory-504.html", "http://www.openwall.com/lists/oss-security/2026/07/28/20"], "fixes": ["4.17.7-0+deb12u1"], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62430", "noindex": false, "published": "2026-07-28T12:32:33.150Z", "modified": "2026-07-28T16:33:30.367Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.00243, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62430", "title": "x86: Out-of-bounds read in vRTC emulation", "description": "Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen needs to cache the guest chosen index, and one of\nthe usages of the index didn't take the necessary locking to avoid\nconcurrent changes.  As a result, a guest could change the index after\nit being checked, causing a subsequent out-of-bound read access to the\ncontents of an array.", "references": ["https://xenbits.xenproject.org/xsa/advisory-503.html", "http://xenbits.xen.org/xsa/advisory-503.html", "http://www.openwall.com/lists/oss-security/2026/07/28/19"], "fixes": ["4.17.7-0+deb12u1"], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62429", "noindex": false, "published": "2026-07-28T12:32:24.333Z", "modified": "2026-07-28T16:33:29.286Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00224, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62429", "title": "vNUMA domain cleanup may race other operations", "description": "Accessing the vNUMA configuration data of a guest is still possible when\ndomain destruction has already started.  The cleaning up of that\nconfiguration information is not synchronized with its retrieval by a\ndevice model controlling the guest.", "references": ["https://xenbits.xenproject.org/xsa/advisory-502.html", "http://xenbits.xen.org/xsa/advisory-502.html", "http://www.openwall.com/lists/oss-security/2026/07/28/18"], "fixes": ["4.17.7-0+deb12u1"], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-62436", "noindex": false, "published": "2026-07-28T12:32:16.344Z", "modified": "2026-07-28T15:17:33.705Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "severity": "medium", "epss": 0.00188, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-62436", "title": "grant-table: version change racing with other operations", "description": "[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nWith the introduction of Grant Table v2 came the requirement to be able to\nswitch between versions.  Switching from v1 to v2 reduces the number of\nvalid grant references, as a bigger shared entry structure is then needed\nwhile the shared table doesn't change size.  Switching from v2 back to v1\nthe status frames, which are separate in v2, go away.\n\nCode holding, but intermediately dropping and then re-acquiring the grant\ntable lock, sometimes wrongly assumes that said properties wouldn't change\nacross the window in ", "references": ["https://xenbits.xenproject.org/xsa/advisory-501.html", "https://nvd.nist.gov/vuln/detail/CVE-2026-62436"], "fixes": ["4.17.7-0+deb12u1"], "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}]}], "total": 488, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 25, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "xen", "path": "vulns/debian-12/xen", "ecosystem": "Debian:12"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 9, "kev": 0}, "lastmod": "2026-10-20T17:36:56.453Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}