Export limit exceeded: 425959 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 17088 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,088

Export CSV
CVE-2022-32547

ImageMagick: load of misaligned address at MagickCore/property.c

In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Imagemagick Redhat
Products
Fedora Imagemagick Enterprise Linux
CVE-2022-32546

ImageMagick: outside the range of representable values of type 'unsigned long' at coders/pcl.c

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Imagemagick Redhat
Products
Extra Packages For Enterprise Linux Fedora Imagemagick and 1 more
CVE-2022-32545

ImageMagick: outside the range of representable values of type 'unsigned char' at coders/psd.c

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.

CVSS 3.1 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Fedoraproject Imagemagick Redhat
Products
Extra Packages For Enterprise Linux Fedora Imagemagick and 1 more
CVE-2022-32091

mariadb: server crash in JOIN_CACHE::free or in copy_fields

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Debian Fedoraproject Mariadb and 1 more
Products
Debian Linux Fedora Mariadb and 2 more
CVE-2022-32088

mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Debian Mariadb Redhat
Products
Debian Linux Mariadb Enterprise Linux and 1 more
CVE-2022-32081

mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Fedoraproject Mariadb Redhat
Products
Fedora Mariadb Enterprise Linux and 1 more
CVE-2022-31676

open-vm-tools: local root privilege escalation in the virtual machine

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Linux and 4 more
Products
Debian Linux Fedora Linux Kernel and 6 more
CVE-2022-31630

OOB read due to insufficient input validation in imageloadfont()

In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a specially crafted font file, such as if the loaded font is used with imagechar() function, the read outside allocated buffer will be used. This can lead to crashes or disclosure of confidential information. 

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Php Redhat
Products
Php Enterprise Linux
CVE-2022-31626

mysqlnd/pdo password buffer overflow

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

CVSS 3.1 · 7.5 High EPSS 58.1% KEV · Not listed
Vendors
Debian Php Redhat
Products
Debian Linux Php Enterprise Linux and 2 more
CVE-2022-31625

Freeing unallocated memory in php_pgsql_free_params()

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.

CVSS 3.1 · 8.1 High EPSS 3.8% KEV · Not listed
Vendors
Debian Php Redhat
Products
Debian Linux Php Enterprise Linux and 1 more
CVE-2022-31624

mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Enterprise Linux Rhel Eus and 1 more
CVE-2022-31623

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Enterprise Linux Rhel Software Collections
CVE-2022-31622

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Mariadb Redhat
Products
Mariadb Enterprise Linux Rhel Software Collections