Export limit exceeded: 349371 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 43816 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (43816 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-0414 1 Dolibarr 1 Dolibarr Erp\/crm 2024-11-21 4.3 Medium
Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0.
CVE-2022-0408 3 Debian, Fedoraproject, Vim 3 Debian Linux, Fedora, Vim 2024-11-21 7.8 High
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0407 1 Vim 1 Vim 2024-11-21 7.8 High
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
CVE-2022-0400 1 Linux 1 Linux Kernel 2024-11-21 7.5 High
An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.
CVE-2022-0393 2 Fedoraproject, Vim 2 Fedora, Vim 2024-11-21 7.1 High
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0368 3 Apple, Debian, Vim 3 Macos, Debian Linux, Vim 2024-11-21 7.8 High
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-0323 1 Mustache Project 1 Mustache 2024-11-21 8.8 High
Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.
CVE-2022-0319 4 Apple, Canonical, Debian and 1 more 4 Macos, Ubuntu Linux, Debian Linux and 1 more 2024-11-21 5.5 Medium
Out-of-bounds Read in vim/vim prior to 8.2.
CVE-2022-0318 4 Apple, Debian, Redhat and 1 more 4 Macos, Debian Linux, Enterprise Linux and 1 more 2024-11-21 9.8 Critical
Heap-based Buffer Overflow in vim/vim prior to 8.2.
CVE-2022-0284 1 Imagemagick 1 Imagemagick 2024-11-21 7.1 High
A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.
CVE-2022-0220 1 Welaunch 1 Wordpress Gdpr\&ccpa 2024-11-21 6.1 Medium
The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML payload isn't properly escaped, it may be interpreted by a web browser led to this endpoint. Javascript code may be executed on a victim's browser. Due to v1.9.26 adding a CSRF check, the XSS is only exploitable against unauthenticated users (as they all share the same nonce)
CVE-2022-0214 1 Custom Popup Builder Project 1 Custom Popup Builder 2024-11-21 7.5 High
The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog
CVE-2022-0213 2 Debian, Vim 2 Debian Linux, Vim 2024-11-21 6.6 Medium
vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-0174 1 Dolibarr 1 Dolibarr Erp\/crm 2024-11-21 4.3 Medium
Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr.
CVE-2022-0173 2 Fedoraproject, Radare 2 Fedora, Radare2 2024-11-21 5.5 Medium
radare2 is vulnerable to Out-of-bounds Read
CVE-2022-0158 3 Apple, Fedoraproject, Vim 3 Macos, Fedora, Vim 2024-11-21 3.3 Low
vim is vulnerable to Heap-based Buffer Overflow
CVE-2022-0142 1 Vfbpro 1 Visual Form Builder 2024-11-21 9.8 Critical
The Visual Form Builder WordPress plugin before 3.0.8 is vulnerable to CSV injection allowing a user with low level or no privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
CVE-2022-0128 2 Apple, Vim 3 Mac Os X, Macos, Vim 2024-11-21 7.8 High
vim is vulnerable to Out-of-bounds Read
CVE-2022-0124 1 Gitlab 1 Gitlab 2024-11-21 4.3 Medium
An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input and allows to craft malicious URLs that are sent to slack.
CVE-2022-0114 2 Fedoraproject, Google 2 Fedora, Chrome 2024-11-21 8.1 High
Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.