Export limit exceeded: 425892 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 11764 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,764

Export CSV
CVE-2021-24040

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0.

CVSS 3.1 · 9.8 Critical EPSS 17.4% KEV · Not listed
Vendors
Facebook
Products
Parlai
CVE-2021-24036

Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions prior to 4.80.5, all versions between 4.81.0 and 4.102.1, all versions between 4.103.0 and 4.113.0, and versions 4.114.0, 4.115.0, 4.116.0, 4.117.0, 4.118.0 and 4.118.1.

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Facebook
Products
Folly Hhvm
CVE-2021-23909

An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution.

CVSS 3.1 · 6.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Mercedes-benz
Products
A 220 A 220 4matic E 350 and 5 more
CVE-2021-23908

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution.

CVSS 3.1 · 2.9 Low EPSS 2.4% KEV · Not listed
Vendors
Mercedes-benz
Products
A 220 A 220 4matic E 350 and 5 more
CVE-2021-23907

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution.

CVSS 3.1 · 2.9 Low EPSS 2.4% KEV · Not listed
Vendors
Mercedes-benz
Products
A 220 A 220 4matic E 350 and 5 more
CVE-2021-23906

An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution.

CVSS 3.1 · 1.8 Low EPSS < 1% KEV · Not listed
Vendors
Mercedes-benz
Products
A 220 A 220 4matic E 350 and 5 more