Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5RARLAB UnRAR Directory Traversal VulnerabilityKEVEPSS 99.2%May 9, 2022
- Critical9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query.EPSS 64.5%May 4, 2022
- High7.3The c_rehash script does not properly sanitise shell metacharacters to prevent command injection.EPSS 82.6%May 3, 2022
- Medium6.5In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows.EPSS 3.8%May 3, 2022
- Medium6.6A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem.EPSS 1.5%Apr 29, 2022
- High7.8An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5.EPSS 1.4%Apr 14, 2022
- High7.8Linux Kernel Out-of-Bounds Write VulnerabilityKEVEPSS 8.9%Mar 25, 2022
- High7.5zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.EPSS 51.7%Mar 25, 2022
- High7.5The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli.EPSS 73.2%Mar 15, 2022
- Medium6.5There's a flaw in urllib's AbstractBasicAuthHandler class.EPSS 4.8%Mar 10, 2022
- High7.8Linux Kernel Privilege Escalation VulnerabilityKEVEPSS 92.8%Mar 10, 2022
- High7.5A flaw was found in python.EPSS 13.2%Mar 4, 2022
- High7.8Linux Kernel Improper Authentication VulnerabilityKEVEPSS 5.5%Mar 3, 2022
- High7.8Arm Mali GPU Kernel Driver Unspecified VulnerabilityKEVEPSS 1.1%Mar 3, 2022
- High7.5valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.EPSS 5.1%Feb 26, 2022
- High8.8In Cyrus SASL 2.1.17 through 2.1.27 before 2.1.28, plugins/sql.c does not escape the password for a SQL INSERT or UPDATE statement.EPSS 4.1%Feb 24, 2022
- Medium5.5A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support.EPSS 0.4%Feb 21, 2022
- High7.1An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel.EPSS 0.3%Feb 18, 2022
- Critical9.8In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.EPSS 4.8%Feb 18, 2022
- High7.5In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.EPSS 4.7%Feb 18, 2022
- Medium6.5In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.EPSS 3.3%Feb 18, 2022
- High7.8Red Hat Polkit Incorrect Authorization VulnerabilityKEVEPSS 23.7%Feb 16, 2022
- Critical9.8xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.EPSS 34.2%Feb 16, 2022
- Critical9.8xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.EPSS 5.0%Feb 16, 2022
- Medium5.5In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.EPSS 1.2%Feb 14, 2022