Export limit exceeded: 30201 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 30,201

Export CSV
CVE-2024-26821

kernel: fs: relax mount_setattr() permission checks

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.1 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2024-26827

kernel: i2c: qcom-geni: Correct I2C TRE sequence

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 4.4 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2024-26628

kernel: drm/amdkfd: Fix lock dependency warning

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 6.0 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2021-46907

kernel: KVM: internal.ndata could be updated by the user process at anytime

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 7.1 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2021-46946

kernel: ext4: fix check to prevent false positive report of incorrect used inodes

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2021-3532

ansible: async_file sensitive information disclosure

This CVE is marked as INVALID and not a bug

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2021-3487

binutils: Excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section()

Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux
CVE-2022-23816

hw: cpu: AMD: RetBleed Arbitrary Speculative Code Execution with Return Instructions

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.

CVSS 3.1 · 5.6 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Rhel Eus Rhel Extras Rt and 1 more
CVE-2022-1214

axios: Exposure of Sensitive Information to an Unauthorized Actor

DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2021-44907

qs: Insufficient sanitization of property in the gs.parse function

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.1 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2020-24979

bison: Buffer overflow in src/symtab.c via crafted input file redefining the EOF token can lead to DoS

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.1 · 5.5 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2020-14151

libjpeg: read_*_pixel functions in rdtarga.c in cjpeg mishandles EOF

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11813. Reason: This candidate is a duplicate of CVE-2018-11813. Notes: All CVE users should reference [ID] instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2019-15601

curl: improper input validation allows users to create a 'FILE:' URL that can make the client access a remote file using SMB

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

CVSS 3.1 · 3.3 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2019-14561

edk2: improper input validation leads to memory corruption when loading PE sections

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none.

CVSS 3.0 · 0.0 Low EPSS n/a KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2018-3736

nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-3739. Reason: This candidate is a duplicate of CVE-2018-3739. Notes: All CVE users should reference CVE-2018-3739 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 8.6 High EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2018-14032

hdf5: heap-based buffer over-read in the function H5O_fill_new_decode in H5Ofill.c

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2017-17457

libsndfile: SEGV on unknown address in the function d2ulaw_array()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14246. Reason: This candidate is a duplicate of CVE-2017-14246. Notes: All CVE users should reference CVE-2017-14246 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 3.3 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2017-17456

libsndfile: SEGV on unknown address in the function d2alaw_array()

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14245. Reason: This candidate is a duplicate of CVE-2017-14245. Notes: All CVE users should reference CVE-2017-14245 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 3.3 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2016-1000023

nodejs-minimatch: Regular expression denial-of-service

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10540. Reason: This candidate is a reservation duplicate of CVE-2016-10540. Notes: All CVE users should reference CVE-2016-10540 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 5.3 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Openshift Rhel Software Collections
CVE-2016-1000022

nodejs-negotiator: Regular expression denial-of-service

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10539. Reason: This candidate is a duplicate of CVE-2016-10539. Notes: All CVE users should reference CVE-2016-10539 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 2.0 · 4.3 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Openshift