{"kind": "product", "path": "vulns/ubuntu-25.10/hdf5", "name": "hdf5", "product": "hdf5", "ecosystem": "Ubuntu:25.10", "items": [{"id": "CVE-2026-29043", "noindex": false, "published": "2026-04-10T15:35:51.682Z", "modified": "2026-04-14T14:50:46.566Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00213, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-29043", "title": "HDF5 H5T__ref_mem_setnull Heap Buffer Overflow", "description": "HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file parsed by HDF5 can trigger a write-based heap buffer overflow condition in the H5T__ref_mem_setnull method. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems.", "references": ["https://github.com/HDFGroup/hdf5/security/advisories/GHSA-qm2m-5g5w-2277", "https://nvd.nist.gov/vuln/detail/CVE-2026-29043"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-34734", "noindex": false, "published": "2026-04-09T19:01:21.794Z", "modified": "2026-07-15T01:04:04.102Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00193, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-34734", "title": "HDF5: H5T__conv_struct Use After Free", "description": "HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5T__conv_struct. The original object was allocated by H5D__typeinfo_init_phase3 and freed by H5D__typeinfo_term.", "references": ["https://github.com/HDFGroup/hdf5/security/advisories/GHSA-w7v2-9cmr-pwwj", "https://access.redhat.com/security/cve/CVE-2026-34734", "https://bugzilla.redhat.com/show_bug.cgi?id=2457034"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-26200", "noindex": false, "published": "2026-02-19T19:19:10.512Z", "modified": "2026-07-15T01:15:09.607Z", "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00419, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-26200", "title": "HDF5 Affected by H5T__conv_struct_opt Heap Buffer Overflow", "description": "HDF5 is software for managing data. Prior to version 1.14.4-2, an attacker who can control an `h5` file parsed by HDF5 can trigger a write-based heap buffer overflow condition. This can lead to a denial-of-service condition, and potentially further issues such as remote code execution depending on the practical exploitability of the heap overflow against modern operating systems. Real-world exploitability of this issue in terms of remote-code execution is currently unknown. Version 1.14.4-2 fixes the issue.", "references": ["https://github.com/HDFGroup/hdf5/security/advisories/GHSA-5p2m-j456-9mr2", "https://access.redhat.com/security/cve/CVE-2026-26200", "https://bugzilla.redhat.com/show_bug.cgi?id=2441088"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-7069", "noindex": false, "published": "2025-07-04T21:02:06.876Z", "modified": "2025-07-08T13:38:56.989Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00269, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-7069", "title": "HDF5 H5FSsection.c H5FS__sect_link_size heap-based overflow", "description": "A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link_size of the file src/H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314904", "https://vuldb.com/?ctiid.314904", "https://vuldb.com/?submit.602538"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-7068", "noindex": false, "published": "2025-07-04T20:32:06.420Z", "modified": "2025-07-08T13:56:18.646Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00242, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-7068", "title": "HDF5 H5FL.c H5FL__malloc memory leak", "description": "A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5FL__malloc of the file src/H5FL.c. The manipulation leads to memory leak. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314903", "https://vuldb.com/?ctiid.314903", "https://vuldb.com/?submit.602537"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-7067", "noindex": false, "published": "2025-07-04T18:02:05.802Z", "modified": "2025-07-08T13:57:09.724Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00269, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-7067", "title": "HDF5 H5FScache.c H5FS__sinfo_serialize_node_cb heap-based overflow", "description": "A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FS__sinfo_serialize_node_cb of the file src/H5FScache.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314902", "https://vuldb.com/?ctiid.314902", "https://vuldb.com/?submit.602536"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6858", "noindex": false, "published": "2025-06-29T11:00:14.487Z", "modified": "2025-06-30T20:11:40.651Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00242, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6858", "title": "HDF5 H5Centry.c H5C__flush_single_entry null pointer dereference", "description": "A vulnerability was found in HDF5 1.14.6 and classified as problematic. Affected by this issue is the function H5C__flush_single_entry of the file src/H5Centry.c. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314330", "https://vuldb.com/?ctiid.314330", "https://vuldb.com/?submit.602530"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6857", "noindex": false, "published": "2025-06-29T10:00:18.376Z", "modified": "2025-06-30T15:49:20.682Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00283, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6857", "title": "HDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow", "description": "A vulnerability has been found in HDF5 1.14.6 and classified as problematic. Affected by this vulnerability is the function H5G__node_cmp3 of the file src/H5Gnode.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314329", "https://vuldb.com/?ctiid.314329", "https://vuldb.com/?submit.602529"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6856", "noindex": false, "published": "2025-06-29T09:31:05.927Z", "modified": "2025-06-30T16:02:47.962Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00248, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6856", "title": "HDF5 H5FL.c H5FL__reg_gc_list use after free", "description": "A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FL__reg_gc_list of the file src/H5FL.c. The manipulation leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314328", "https://vuldb.com/?ctiid.314328", "https://vuldb.com/?submit.602528"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6818", "noindex": false, "published": "2025-06-28T15:31:06.437Z", "modified": "2025-06-30T16:05:49.951Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00299, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6818", "title": "HDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow", "description": "A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5O__chunk_protect of the file /src/H5Ochunk.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314256", "https://vuldb.com/?ctiid.314256", "https://vuldb.com/?submit.602326"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6817", "noindex": false, "published": "2025-06-28T11:31:05.770Z", "modified": "2025-06-30T16:06:39.966Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00228, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6817", "title": "HDF5 H5Centry.c H5C__load_entry resource consumption", "description": "A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5C__load_entry of the file /src/H5Centry.c. The manipulation leads to resource consumption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314255", "https://vuldb.com/?ctiid.314255", "https://vuldb.com/?submit.602294"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6816", "noindex": false, "published": "2025-06-28T08:00:18.877Z", "modified": "2025-06-30T16:07:24.252Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00253, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6816", "title": "HDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow", "description": "A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5O__fsinfo_encode of the file /src/H5Ofsinfo.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314254", "https://vuldb.com/?ctiid.314254", "https://vuldb.com/?submit.602291"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6750", "noindex": false, "published": "2025-06-27T02:31:07.257Z", "modified": "2025-06-27T13:37:44.290Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00246, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6750", "title": "HDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow", "description": "A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. Affected by this issue is the function H5O__mtime_new_encode of the file src/H5Omtime.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.314048", "https://vuldb.com/?ctiid.314048", "https://vuldb.com/?submit.601017"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6516", "noindex": false, "published": "2025-06-23T17:00:17.189Z", "modified": "2025-06-23T17:40:18.086Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00376, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6516", "title": "HDF5 H5Fint.c H5F_addr_decode_len heap-based overflow", "description": "A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.313636", "https://vuldb.com/?ctiid.313636", "https://vuldb.com/?submit.592589"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6270", "noindex": false, "published": "2025-06-19T16:31:06.224Z", "modified": "2025-06-23T19:30:54.188Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00262, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6270", "title": "HDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow", "description": "A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FS__sect_find_node of the file H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.313274", "https://vuldb.com/?ctiid.313274", "https://vuldb.com/?submit.592588"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-6269", "noindex": false, "published": "2025-06-19T16:00:17.595Z", "modified": "2025-06-23T19:30:59.733Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00262, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-6269", "title": "HDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow", "description": "A vulnerability classified as critical was found in HDF5 up to 1.14.6. Affected by this vulnerability is the function H5C__reconstruct_cache_entry of the file H5Cimage.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.313273", "https://vuldb.com/?ctiid.313273", "https://vuldb.com/?submit.592587"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-44905", "noindex": false, "published": "2025-05-30T00:00:00.000Z", "modified": "2025-05-30T22:01:54.071Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00474, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-44905", "title": "CVE-2025-44905", "description": "hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5Z__filter_scaleoffset function.", "references": ["https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc5.md", "https://nvd.nist.gov/vuln/detail/CVE-2025-44905"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-44904", "noindex": false, "published": "2025-05-30T00:00:00.000Z", "modified": "2025-05-30T22:01:59.619Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00458, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-44904", "title": "CVE-2025-44904", "description": "hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VM_memcpyvv function.", "references": ["https://github.com/madao123123/crash_report/blob/main/hdf5_poc/hdf5_poc1.md", "https://nvd.nist.gov/vuln/detail/CVE-2025-44904"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-2926", "noindex": false, "published": "2025-03-28T20:00:13.574Z", "modified": "2025-07-24T09:43:31.477Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00255, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-2926", "title": "HDF5 H5Ocache.c H5O__cache_chk_serialize null pointer dereference", "description": "A vulnerability was found in HDF5 up to 1.14.6 and classified as problematic. This issue affects the function H5O__cache_chk_serialize of the file src/H5Ocache.c. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.301901", "https://vuldb.com/?ctiid.301901", "https://vuldb.com/?submit.521246"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-2925", "noindex": false, "published": "2025-03-28T20:00:11.000Z", "modified": "2025-07-24T09:43:33.655Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00273, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-2925", "title": "HDF5 H5MM.c H5MM_realloc double free", "description": "A vulnerability has been found in HDF5 up to 1.14.6 and classified as problematic. This vulnerability affects the function H5MM_realloc of the file src/H5MM.c. The manipulation of the argument mem leads to double free. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.", "references": ["https://vuldb.com/?id.301900", "https://vuldb.com/?ctiid.301900", "https://vuldb.com/?submit.521193"], "fixes": [], "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}]}], "total": 46, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 3, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "hdf5", "path": "vulns/ubuntu-25.10/hdf5", "ecosystem": "Ubuntu:25.10"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-07-15T01:15:09.607Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}