Export limit exceeded: 17088 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2022-40302

frr: denial of service by crafting a BGP OPEN message with an option of type 0xff

An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0xff (Extended Length from RFC 9072), attackers may cause a denial of service (assertion failure and daemon restart, or out-of-bounds read). This is possible because of inconsistent boundary checks that do not account for reading 3 bytes (instead of 2) in this 0xff case.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Debian Frrouting Redhat
Products
Debian Linux Frrouting Enterprise Linux
CVE-2023-27932

webkitgtk: Same Origin Policy bypass via crafted web content

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Debian Redhat
Products
Ipados Iphone Os Macos and 6 more
CVE-2022-32885

webkitgtk: Memory corruption issue when processing web content

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Redhat
Products
Ipados Iphone Os Macos and 7 more
CVE-2023-30086

libtiff: Heap buffer overflow in tiffcp() at tiffcp.c

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2023-27954

webkitgtk: Website may be able to track sensitive user information

The issue was addressed by removing origin information. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. A website may be able to track sensitive user information.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apple Debian Redhat
Products
Ipados Iphone Os Macos and 6 more
CVE-2023-2700

libvirt: Memory leak in virPCIVirtualFunctionList cleanup

A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device's capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct's g_autoptr cleanup.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat
Products
Fedora Enterprise Linux Libvirt and 1 more
CVE-2023-32573

qt: Uninitialized variable usage in m_unitsPerEm

In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qt Redhat
Products
Qt Enterprise Linux
CVE-2022-33196

kernel: Intel firmware update for Incorrect default permissions in some memory controller configurations

Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Intel Redhat
Products
Xeon D-1513n Xeon D-1513n Firmware Xeon D-1518 and 271 more
CVE-2022-36369

qatzip: local privilege escalation

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Intel Redhat
Products
Qatzip Enterprise Linux Rhel Eus
CVE-2023-21102

kernel: bypass of shadow stack protection due to a logic error

In __efi_rt_asm_wrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-260821414References: Upstream kernel

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Android Enterprise Linux
CVE-2023-29400

Improper handling of empty HTML attributes in html/template

Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.

CVSS 3.1 · 7.3 High EPSS 1.0% KEV · Not listed
Vendors
Golang Redhat
Products
Go Acm Advanced Cluster Security and 19 more
CVE-2023-24539

Improper sanitization of CSS values in html/template

Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character can result in unexpectedly closing the CSS context and allowing for injection of unexpected HTML, if executed with untrusted input.

CVSS 3.1 · 7.3 High EPSS 1.0% KEV · Not listed
Vendors
Golang Redhat
Products
Go Acm Advanced Cluster Security and 19 more
CVE-2023-2731

libtiff: null pointer deference in LZWDecode() in libtiff/tif_lzw.c

A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw allows a local attacker to craft specific input data that can cause the program to dereference a NULL pointer when decompressing a TIFF format file, resulting in a program crash or denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Libtiff Redhat
Products
Fedora Libtiff Enterprise Linux
CVE-2023-2491

emacs: Regression of CVE-2023-28617 fixes in the Red Hat Enterprise Linux

A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:latex" function in ob-latex.el can result in arbitrary command execution. This CVE exists because of a CVE-2023-28617 security regression for the emacs package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu Redhat
Products
Emacs Enterprise Linux Enterprise Linux Eus and 2 more
CVE-2023-2319

pcs: webpack: Regression of CVE-2023-28154 fixes in the Red Hat Enterprise Linux

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The CVE-2023-2319 was assigned to that Red Hat specific security regression in Red Hat Enterprise Linux 9.2.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Clusterlabs Redhat
Products
Pcs Enterprise Linux Enterprise Linux High Availability and 1 more
CVE-2023-2295

libreswan: Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the libreswan responder SPI as its own initiator SPI, the pluto daemon state machine crashes. No remote code execution is possible. This CVE exists because of a CVE-2023-30570 security regression for libreswan package in Red Hat Enterprise Linux 8.8 and Red Hat Enterprise Linux 9.2.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Libreswan Redhat
Products
Libreswan Enterprise Linux Enterprise Linux Eus and 4 more
CVE-2023-30775

libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c

A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamples32bits, tiffcrop.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Libtiff Redhat
Products
Libtiff Enterprise Linux
CVE-2023-33285

qt: buffer over-read via a crafted reply from a DNS server

An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qt Redhat
Products
Qt Enterprise Linux