Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,812

Export CSV
CVE-2024-26650

kernel: p2sb_bar() calls during PCI device probe

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2020-23064

jquery: Cross-site scripting

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 6.3 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Amq Broker
CVE-2023-52651

kernel: wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2022-27458

mariadb: use-after-poison in Binary_string::free_buffer

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Software Collections
CVE-2021-47213

kernel: NFSD: Fix exposure in nfsd4_decode_bitmap()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 6.1 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2024-23252

webkit: processing malicious web content may lead to denial-of-service

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 6.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Els
CVE-2023-52605

kernel: ACPI: extlog: fix NULL pointer dereference check

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2024-26609

kernel: netfilter: nf_tables: reject QUEUE/DROP verdict parameters

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2023-52466

kernel: out-of-bounds read in pci_dev_for_each_resource()

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2021-3487

binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2023-4128

kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route

** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

CVSS 3.1 · 7.8 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Aus Rhel E4s and 4 more
CVE-2023-5129

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Aus Rhel E4s and 2 more
CVE-2023-35825

kernel: r592: race condition leading to use-after-free in r592_remove()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 6.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhev Hypervisor
CVE-2023-30079

libeconf: Stack overflow in function read_file at libeconf/lib/getfilecontents.c

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-22652. Reason: This record is a duplicate of CVE-2023-22652. Notes: All CVE users should reference CVE-2023-22652 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

CVSS 3.1 · 8.8 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2022-40156

xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus Camel Spring Boot
CVE-2022-40155

xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus
CVE-2022-40154

xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus
CVE-2022-40153

xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus