Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,812

Export CSV
CVE-2022-3522

kernel: race condition in hugetlb_no_page() in mm/hugetlb.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 7.0 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhev Hypervisor
CVE-2022-30294

webkitgtk: heap-buffer-overflow in WebCore::TextureMapperLayer::setContentsLayer

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-30293. Reason: This candidate is a duplicate of CVE-2022-30293. Notes: All CVE users should reference CVE-2022-30293 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Rhel Els
CVE-2022-23816

hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVSS 3.1 · 5.6 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhel Extras Rt and 1 more
CVE-2021-31291

exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 8.1 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2021-20095

python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

CVSS 3.1 · 7.8 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Software Collections
CVE-2019-14560

edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.

CVSS 3.1 · 6.1 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2018-9306

exiv2: out of bounds read in IptcData::printStructure in iptc.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2018-4700

cups: Predictable session cookie breaks CSRF protection

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 7.3 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2017-7775

graphite2: assertion error "size() > n"

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.0 · 3.7 Low EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2017-5735

edk2: Privilege escalation via heap-based buffer overflow in Decode() function

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

CVSS 3.0 · 6.7 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2017-5734

edk2: Privilege escalation via stack-based buffer overflow in MakeTable() function

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

CVSS 3.0 · 6.7 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2017-5733

edk2: Privilege escalation via heap-based buffer overflow in MakeTable() function

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

CVSS 3.0 · 6.7 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2017-5732

edk2: Privilege escalation via processing of malformed files in BaseUefiDecompressLib.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

CVSS 3.0 · 6.7 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2017-16012

js-jquery: XSS in responses from cross-origin ajax requests

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 6.8 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Jboss Fuse Jboss Single Sign On
CVE-2017-11544

tcpdump: Segmentation Violation in the compressed_sl_print

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11543. Reason: This candidate is a duplicate of CVE-2017-11543. Notes: All CVE users should reference CVE-2017-11543 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2016-5617

mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2016-6664. Notes: All CVE users should reference CVE-2016-6664 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 7.8 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Software Collections
CVE-2016-5616

mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 7.0 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Software Collections
CVE-2016-5483

mysql: Incorrect input validation allowing code execution via mysqldump

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 6.4 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Software Collections
CVE-2016-5320

libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 6.3 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux