Export limit exceeded: 425959 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 29322 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 29,322

Export CSV
CVE-2026-70219

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
365 Apps Office 2021 Office 2024
CVE-2026-88154

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
365 Apps Microsoft 365 Office 2021 and 2 more
CVE-2021-36087

libsepol: heap-based buffer overflow in ebitmap_match_any()

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat Selinux Project
Products
Fedora Enterprise Linux Selinux
CVE-2021-32292

json-c: stack-buffer-overflow in parseit() in json_parse.c

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Json-c Netapp
Products
Json-c Active Iq Unified Manager
CVE-2021-31239

sqlite: denial of service via the appendvfs.c function

An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Sqlite
Products
Sqlite
CVE-2021-20193

tar: Memory leak in read_header() in list.c

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 3.3 Low EPSS 1.1% KEV · Not listed
Vendors
Gnu
Products
Tar
CVE-2021-3998

glibc: Unexpected return value from realpath() could leak data based on the application

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Gnu Netapp
Products
Glibc H300s H300s Firmware and 9 more
CVE-2021-3517

libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c

There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most likely impact of this flaw is to application availability, with some potential impact to confidentiality and integrity if an attacker is able to use memory information to further exploit the application.

CVSS 3.1 · 8.6 High EPSS 17.0% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 3 more
Products
Debian Linux Fedora Active Iq Unified Manager and 27 more
CVE-2021-3177

python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.

CVSS 3.1 · 9.8 Critical EPSS 24.0% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 3 more
Products
Debian Linux Fedora Active Iq Unified Manager and 9 more
CVE-2020-36223

openldap: Out-of-bounds read in Values Return Filter

A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read).

CVSS 3.1 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Apple Debian Openldap
Products
Mac Os X Macos Debian Linux and 1 more
CVE-2020-29573

glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern

sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e., 2.23 or later) because of commits made in 2015 for inlining of C99 math functions through use of GCC built-ins. In other words, the reference to 2.23 is intentional despite the mention of "Fixed for glibc 2.33" in the 26649 reference.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Gnu Netapp Redhat
Products
Glibc Cloud Backup Solidfire Baseboard Management Controller and 6 more
CVE-2020-29362

p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS#11 function call, the receiving entity may allow the reading of up to 4 bytes of memory past the heap allocation.

CVSS 3.1 · 5.3 Medium EPSS 2.3% KEV · Not listed
Vendors
P11-kit Project Redhat
Products
P11-kit Enterprise Linux
CVE-2020-24977

libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c

GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 4 more
Products
Debian Linux Fedora Active Iq Unified Manager and 17 more
CVE-2020-22218

libssh2: use-of-uninitialized-value in _libssh2_transport_read

An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Libssh2 Redhat
Products
Libssh2 Enterprise Linux
CVE-2020-19190

ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

Buffer Overflow vulnerability in _nc_find_entry in tinfo/comp_hash.c:70 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2020-19188

ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1116 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2020-19187

ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

Buffer Overflow vulnerability in fmt_entry function in progs/dump_entry.c:1100 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager
CVE-2020-19186

ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

Buffer Overflow vulnerability in _nc_find_entry function in tinfo/comp_hash.c:66 in ncurses 6.1 allows remote attackers to cause a denial of service via crafted command.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Invisible-island Netapp
Products
Ncurses Active Iq Unified Manager