Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 111,270

Export CSV
CVE-2022-40154

xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus
CVE-2022-40153

xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus
CVE-2022-3756

exiv2: integer overflow in quicktimevideo.cpp

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 8.8 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2022-3719

exiv2: Heap-buffer-overflow in Exiv2::MemIo::read

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2022-3717

exiv2: multiple memory corruption in bmffimage.cpp

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 7.5 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2022-3522

kernel: race condition in hugetlb_no_page() in mm/hugetlb.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVSS 3.1 · 7.0 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhev Hypervisor
CVE-2021-31291

exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 8.1 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus
CVE-2021-20095

python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

CVSS 3.1 · 7.8 High EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Software Collections
CVE-2020-26159

oniguruma: Buffer overflow in concat_opt_exact_str could result in DoS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.1 · 8.6 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2020-24741

qt: QLibrary loads libraries relative to CWD which could result in arbitrary code execution

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-0570. Reason: This candidate is a duplicate of CVE-2020-0570. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2020-0570 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 7.8 High EPSS n/a KEV · Not listed
Vendors
—
Products
—