Export limit exceeded: 29313 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2020-36230

openldap: Assertion failure in ber_next_element in decode.c

A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service.

CVSS 3.1 · 7.5 High EPSS 12.1% KEV · Not listed
Vendors
Apache Apple Debian and 1 more
Products
Bookkeeper Mac Os X Macos and 2 more
CVE-2019-19924

sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

CVSS 3.1 · 5.3 Medium EPSS 10.7% KEV · Not listed
Vendors
Apache Netapp Oracle and 3 more
Products
Bookkeeper Cloud Backup Mysql Workbench and 3 more
CVE-2019-19906

cyrus-sasl: denial of service in _sasl_add_string function

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl.

CVSS 3.1 · 7.5 High EPSS 8.0% KEV · Not listed
Vendors
Apache Apple Canonical and 5 more
Products
Bookkeeper Ipados Iphone Os and 17 more
CVE-2019-17571

log4j: deserialization of untrusted data in SocketServer

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.

CVSS 3.1 · 9.8 Critical EPSS 70.0% KEV · Not listed
Vendors
Apache Canonical Debian and 4 more
Products
Bookkeeper Log4j Ubuntu Linux and 23 more
CVE-2017-6891

libtasn1: Stack-based buffer overflow in asn1_find_node()

Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-based buffer overflow by tricking a user into processing a specially crafted assignments file via the e.g. asn1Coding utility.

CVSS 3.1 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Apache Debian Gnu
Products
Bookkeeper Debian Linux Libtasn1
CVE-2022-32531

Apache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification

The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Apache
Products
Bookkeeper
CVE-2020-23922

giflib: out-of-bounds read in DumpScreen2RGB() in gif2rgb.c in gif2rgb tool

An issue was discovered in giflib through 5.1.4. DumpScreen2RGB in gif2rgb.c has a heap-based buffer over-read.

CVSS 3.1 · 7.1 High EPSS 2.2% KEV · Not listed
Vendors
Apache Giflib Project
Products
Bookkeeper Giflib