Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10,244

Export CSV
CVE-2022-28041

stb: integer overflow in stbi__jpeg_decode_block_prog_dc() can lead to DoS

stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Fedoraproject Nothings
Products
Debian Linux Fedora Stb Image.h
CVE-2022-27777

tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers

A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.

CVSS 3.1 · 6.1 Medium EPSS 1.7% KEV · Not listed
Vendors
Debian Redhat Rubyonrails
Products
Debian Linux Satellite Actionpack
CVE-2022-27387

mariadb: assertion failures in decimal_bin_size

MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27384

mariadb: crash via component Item_subselect::init_expr_cache_tracker

An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27383

mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c

MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27381

mariadb: server crash at Field::set_default via specially crafted SQL statements

An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27380

mariadb: server crash at my_decimal::operator=

An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27379

mariadb: server crash in component arg_comparator::compare_real_fixed

An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27378

mariadb: server crash in create_tmp_table::finalize

An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27377

mariadb: use-after-poison when complex conversion is involved in blob

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27376

mariadb: assertion failure in Item_args::walk_arg

MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-27337

poppler: A logic error in the Hints::Hints function can cause denial of service

A logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Fedoraproject Freedesktop and 1 more
Products
Debian Linux Fedora Poppler and 1 more
CVE-2022-27239

cifs-utils: stack-based buffer overflow mount.cifs may lead to local privilege escalation to root

In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Hp and 3 more
Products
Debian Linux Fedora Helion Openstack and 17 more