Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5,222

Export CSV
CVE-2022-1621

Heap buffer overflow in vim_strncpy find_word in vim/vim

Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

CVSS 3.1 · 7.8 High EPSS 2.4% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 2 more
Products
Macos Debian Linux Fedora and 3 more
CVE-2022-1466

keycloak: Improper authorization for master realm

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Redhat
Products
Keycloak Red Hat Single Sign On Single Sign-on
CVE-2022-1461

Non Privilege User can Enable or Disable Registered in openemr/openemr

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1437

Heap-based Buffer Overflow in radareorg/radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2022-1383

Heap-based Buffer Overflow in radareorg/radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2022-1381

global heap buffer overflow in skip_range in vim/vim

global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution

CVSS 3.1 · 7.8 High EPSS 3.1% KEV · Not listed
Vendors
Apple Fedoraproject Vim
Products
Macos Fedora Vim
CVE-2022-1286

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Mruby
Products
Mruby
CVE-2022-1253

Heap-based Buffer Overflow in strukturag/libde265

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Struktur
Products
Libde265
CVE-2022-1244

heap-buffer-overflow in radareorg/radare2

heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2022-1240

Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2022-1177

Accounting User Can Download Patient Reports in openemr in openemr/openemr

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1160

heap buffer overflow in get_one_sourceline in vim/vim

heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.

CVSS 3.1 · 7.8 High EPSS 1.3% KEV · Not listed
Vendors
Fedoraproject Vim
Products
Fedora Vim
CVE-2022-1061

Heap Buffer Overflow in parseDragons in radareorg/radare2

Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2022-1052

Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2

Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Radare
Products
Radare2
CVE-2022-0713

Heap-based Buffer Overflow in radareorg/radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Radare
Products
Fedora Radare2
CVE-2022-0676

Heap-based Buffer Overflow in radareorg/radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Fedoraproject Radare
Products
Fedora Radare2
CVE-2022-0631

Heap-based Buffer Overflow in mruby/mruby

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Mruby
Products
Mruby
CVE-2022-0570

Heap-based Buffer Overflow in mruby/mruby

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Mruby
Products
Mruby