Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-46218 |
|
Vulnerability in haxx (CVE-2023-46218)
vulnerability in haxx (CVE-2023-46218). Risk of unauthorized operations or information disclosure. Exploitable via ``curl.co.uk``.
|
| CVE-2023-4911 KEV |
|
[KEV] Vulnerability in Gnu c (CVE-2023-4911)
vulnerability in Gnu c (CVE-2023-4911). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-48237 |
|
Vulnerability in vim (CVE-2023-48237)
vulnerability in vim (CVE-2023-48237). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48236 |
|
Vulnerability in vim (CVE-2023-48236)
vulnerability in vim (CVE-2023-48236). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48235 |
|
Vulnerability in vim (CVE-2023-48235)
vulnerability in vim (CVE-2023-48235). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48234 |
|
Vulnerability in vim (CVE-2023-48234)
vulnerability in vim (CVE-2023-48234). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48233 |
|
Vulnerability in vim (CVE-2023-48233)
vulnerability in vim (CVE-2023-48233). Risk of unauthorized operations or information disclosure. Exploitable via ``ac6378773``.
|
| CVE-2023-48232 |
|
Vulnerability in vim (CVE-2023-48232)
vulnerability in vim (CVE-2023-48232). Risk of unauthorized operations or information disclosure. Exploitable via ``cb0b99f0``.
|
| CVE-2023-48231 |
|
Use-After-Free in vim (CVE-2023-48231)
vulnerability in vim (CVE-2023-48231). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46850 |
|
Use-After-Free in openvpn (CVE-2023-46850)
vulnerability in openvpn (CVE-2023-46850). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5380 |
|
Use-After-Free in xorg (CVE-2023-5380)
vulnerability in xorg (CVE-2023-5380). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-5367 |
|
Out-of-Bounds Write in c (CVE-2023-5367)
out-of-bounds write in c (CVE-2023-5367). Successful exploitation can lead to full system takeover.
|
| CVE-2023-38545 |
|
Out-of-Bounds Write in haxx (CVE-2023-38545)
out-of-bounds write in haxx (CVE-2023-38545). Successful exploitation can lead to full system takeover.
|
| CVE-2023-44487 KEV |
|
[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2023-43615 |
|
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.
|
| CVE-2023-3576 |
|
Buffer Overflow in dos (CVE-2023-3576)
vulnerability in dos (CVE-2023-3576). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-4527 |
|
Vulnerability in gnu (CVE-2023-4527)
vulnerability in gnu (CVE-2023-4527). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-4806 |
|
Use-After-Free in gnu (CVE-2023-4806)
vulnerability in gnu (CVE-2023-4806). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-4750 |
|
Use After Free in GitHub repository vim/vim prior to 9.0.1857.
Use After Free in GitHub repository vim/vim prior to 9.0.1857.
|
| CVE-2023-4733 |
|
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
Use After Free in GitHub repository vim/vim prior to 9.0.1840.
|
| CVE-2020-27418 |
|
Use-After-Free in fedoraproject (CVE-2020-27418)
vulnerability in fedoraproject (CVE-2020-27418). Confidential information can be exposed externally.
|
| CVE-2023-38180 KEV |
|
[KEV] Vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180)
vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-38559 |
|
Out-of-Bounds Read in c (CVE-2023-38559)
vulnerability in c (CVE-2023-38559). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-27405 |
|
Out-of-Bounds Read in platform/external/freetype (CVE-2022-27405)
vulnerability in platform/external/freetype (CVE-2022-27405). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `13:2023-07-01` or later.
|
| CVE-2023-36664 |
|
Vulnerability in artifex (CVE-2023-36664)
vulnerability in artifex (CVE-2023-36664). Successful exploitation can lead to full system takeover.
|
| CVE-2023-2609 |
|
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
|
| CVE-2023-27043 |
|
Vulnerability in libpython (CVE-2023-27043)
vulnerability in libpython (CVE-2023-27043). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.8.20, 3.10.15, 3.11.10, 3.12.6, 3.9.20` or later.
|
| CVE-2023-25136 |
|
Vulnerability in openbsd (CVE-2023-25136)
vulnerability in openbsd (CVE-2023-25136). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-46393 |
|
Out-of-Bounds Read in arm (CVE-2022-46393)
vulnerability in arm (CVE-2022-46393). Successful exploitation can lead to full system takeover.
|
| CVE-2022-46392 |
|
Vulnerability in arm (CVE-2022-46392)
vulnerability in arm (CVE-2022-46392). Confidential information can be exposed externally.
|
| CVE-2022-2601 |
|
Vulnerability in gnu (CVE-2022-2601)
vulnerability in gnu (CVE-2022-2601). Successful exploitation can lead to full system takeover.
|
| CVE-2022-38023 |
|
Netlogon RPC Elevation of Privilege Vulnerability
Netlogon RPC Elevation of Privilege Vulnerability
|
| CVE-2022-37967 |
|
Windows Kerberos Elevation of Privilege Vulnerability
Windows Kerberos Elevation of Privilege Vulnerability
|
| CVE-2022-37966 |
|
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
|
| CVE-2022-21624 |
|
Unsafe Deserialization in c (CVE-2022-21624)
vulnerability in c (CVE-2022-21624). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-21626 |
|
Vulnerability in c (CVE-2022-21626)
vulnerability in c (CVE-2022-21626). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-38013 |
|
Vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-38013)
vulnerability in Microsoft.AspNetCore.App.Runtime.linux-arm (CVE-2022-38013). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `6.0.9` or later.
|
| CVE-2022-2294 KEV |
|
[KEV] Out-of-Bounds Write in Webrtc google (CVE-2022-2294)
out-of-bounds write in Webrtc google (CVE-2022-2294). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2021-33643 |
|
Out-of-Bounds Read in feep (CVE-2021-33643)
vulnerability in feep (CVE-2021-33643). Confidential information can be exposed externally.
|
| CVE-2022-37434 |
|
Out-of-Bounds Write in c (CVE-2022-37434)
out-of-bounds write in c (CVE-2022-37434). Successful exploitation can lead to full system takeover.
|
| CVE-2021-41556 |
|
Out-of-Bounds Read in cpp (CVE-2021-41556)
vulnerability in cpp (CVE-2021-41556). Successful exploitation can lead to full system takeover.
|
| CVE-2022-2160 |
|
Vulnerability in google (CVE-2022-2160)
vulnerability in google (CVE-2022-2160). Confidential information can be exposed externally.
|
| CVE-2022-34169 |
|
Vulnerability in apache (CVE-2022-34169)
vulnerability in apache (CVE-2022-34169). Data can be tampered with by attackers.
|
| CVE-2022-32511 |
|
Unsafe Deserialization in jmespath (CVE-2022-32511)
vulnerability in jmespath (CVE-2022-32511). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2021-33289 |
|
Out-of-Bounds Write in tuxera (CVE-2021-33289)
out-of-bounds write in tuxera (CVE-2021-33289). Successful exploitation can lead to full system takeover.
|
| CVE-2021-35267 |
|
Out-of-Bounds Write in tuxera (CVE-2021-35267)
out-of-bounds write in tuxera (CVE-2021-35267). Successful exploitation can lead to full system takeover.
|
| CVE-2021-35269 |
|
Out-of-Bounds Write in tuxera (CVE-2021-35269)
out-of-bounds write in tuxera (CVE-2021-35269). Successful exploitation can lead to full system takeover.
|
| CVE-2021-35266 |
|
Out-of-Bounds Write in c (CVE-2021-35266)
out-of-bounds write in c (CVE-2021-35266). Successful exploitation can lead to full system takeover.
|
| CVE-2021-38166 |
|
Vulnerability in c (CVE-2021-38166)
vulnerability in c (CVE-2021-38166). Successful exploitation can lead to full system takeover.
|
| CVE-2021-23134 |
|
Use-After-Free in netapp (CVE-2021-23134)
vulnerability in netapp (CVE-2021-23134). Successful exploitation can lead to full system takeover.
|