Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.EPSS 5.0%Feb 16, 2022
- Medium5.5In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.EPSS 1.2%Feb 14, 2022
- High8.4Linux Kernel Heap-Based Buffer Overflow VulnerabilityKEVEPSS 25.2%Feb 11, 2022
- High7.8Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityKEVEPSS 94.9%Jan 28, 2022
- High7.5Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.EPSS 4.0%Jan 26, 2022
- High7.0Linux Kernel Privilege Escalation VulnerabilityKEVEPSS 6.6%Jan 26, 2022
- Critical9.8Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.EPSS 4.6%Jan 24, 2022
- Critical9.8The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without…EPSS 4.3%Jan 14, 2022
- Critical9.8The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without v…EPSS 4.8%Jan 14, 2022
- Medium5.3Zabbix Frontend Improper Access Control VulnerabilityKEVEPSS 95.3%Jan 13, 2022
- High8.8storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 2.8%Jan 10, 2022
- High8.8nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 2.8%Jan 10, 2022
- High8.8lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 2.6%Jan 10, 2022
- Critical9.8defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.4%Jan 10, 2022
- Critical9.8build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 3.4%Jan 10, 2022
- Critical9.8addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.EPSS 4.8%Jan 10, 2022
- High8.8In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too…EPSS 4.2%Jan 1, 2022
- High7.8Android Kernel Use-After-Free VulnerabilityKEVEPSS 1.0%Dec 15, 2021
- Medium6.4Android Kernel Race Condition VulnerabilityKEVEPSS 0.9%Dec 15, 2021
- Critical9.0Apache Log4j2 Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Dec 14, 2021
- Critical10.0Apache Log4j2 Remote Code Execution VulnerabilityKEVEPSS 100.0%Dec 10, 2021
- Critical9.8Roundcube Webmail SQL Injection VulnerabilityKEVEPSS 69.9%Nov 18, 2021
- High7.5GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segme…EPSS 3.7%Nov 15, 2021
- High8.8Google Chromium V8 Memory Corruption VulnerabilityKEVEPSS 38.6%Nov 3, 2021
- Medium6.1Google Chromium Intents Improper Input Validation VulnerabilityKEVEPSS 4.9%Nov 3, 2021