Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2022-2845 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Improper Validation of Specified Quantity in Input in GitHub repository vim/vim prior to 9.0.0218. | 9 Oct |
| CVE-2022-2304 | 7.8 high | 1.0% | vim, fedoraproject, fedora, debian_linux | Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. | 8 Oct |
| CVE-2022-2257 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. | 8 Oct |
| CVE-2021-3928 | 7.8 high | 1.0% | vim, fedoraproject, fedora, debian_linux | vim is vulnerable to Use of Uninitialized Variable | 8 Oct |
| CVE-2022-2345 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Use After Free in GitHub repository vim/vim prior to 9.0.0046. | 8 Oct |
| CVE-2022-2344 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0045. | 8 Oct |
| CVE-2022-2343 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. | 8 Oct |
| CVE-2022-2286 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. | 8 Oct |
| CVE-2022-2285 | 7.8 high | 1.0% | vim, fedoraproject, fedora, debian_linux | Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0. | 8 Oct |
| CVE-2022-2284 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0. | 8 Oct |
| CVE-2022-2210 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. | 8 Oct |
| CVE-2022-2207 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. | 8 Oct |
| CVE-2022-2206 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. | 8 Oct |
| CVE-2022-2175 | 7.8 high | 1.0% | vim, fedoraproject, fedora | Buffer Over-read in GitHub repository vim/vim prior to 8.2. | 8 Oct |
| CVE-2022-2129 | 7.8 high | 1.0% | vim, fedoraproject, fedora, debian_linux | Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. | 8 Oct |
| CVE-2021-3974 | 7.8 high | 1.0% | vim, fedoraproject, fedora, debian_linux | vim is vulnerable to Use After Free | 8 Oct |
| CVE-2024-0567 | 7.5 high | 1.0% | gnu, fedoraproject, gnutls, fedora, active_iq_unified_manager | A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of service attack. | 15 Oct |
| CVE-2019-5094 | 7.5 high | 1.0% | e2fsprogs_project, debian, e2fsprogs, debian_linux, fedora | An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability. | 14 Oct |
| CVE-2023-20900 | 7.5 high | 1.0% | vmware, fedoraproject, tools, open_vm_tools, fedora | A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias https://vdc-download.vmware.com/vmwb-repository/dcr-public/d1902b0e-d479-46bf-8ac9-cee0e31e8ec0/07ce8dbd-db48-4261-9b8f-c6d3ad8ba472/vim.vm.guest.AliasManager.html . | 8 Oct |
| CVE-2023-0361 | 7.4 high | 1.0% | gnu, redhat, gnutls, enterprise_linux, debian_linux | A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection. | 14 Oct |
| CVE-2023-7104 | 7.3 high | 1.0% | sqlite, fedoraproject, fedora | A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999. | 14 Oct |
| CVE-2022-2287 | 7.1 high | 1.0% | vim, fedoraproject, fedora | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. | 8 Oct |
| CVE-2023-51767 | 7.0 high | 1.0% | openbsd, fedoraproject, openssh, fedora, enterprise_linux | OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses." | 15 Oct |
| CVE-2020-13630 | 7.0 high | 1.0% | sqlite, fedoraproject, fedora, ubuntu_linux | ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. | 14 Oct |
| CVE-2023-4273 | 6.7 medium | 1.0% | linux, fedoraproject, linux_kernel, fedora, enterprise_linux | A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack. | 14 Oct |
| CVE-2019-5188 | 6.7 medium | 1.0% | e2fsprogs_project, fedoraproject, e2fsprogs, fedora, debian_linux | A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability. | 14 Oct |
| CVE-2021-43975 | 6.7 medium | 1.0% | linux, fedoraproject, linux_kernel, fedora, debian_linux | In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. | 8 Oct |
| CVE-2021-28972 | 6.7 medium | 1.0% | linux, fedoraproject, linux_kernel, fedora, cloud_backup | In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8. | 8 Oct |
| CVE-2020-13529 | 6.1 medium | 1.0% | systemd_project, fedoraproject, systemd, fedora, active_iq_unified_manager | An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server. | 14 Oct |
| CVE-2020-35494 | 6.1 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2020-27171 | 6.0 medium | 1.0% | linux, fedoraproject, linux_kernel, fedora, debian_linux | An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d. | 8 Oct |
| CVE-2023-5981 | 5.9 medium | 1.0% | debian, gnu, debian_linux, gnutls, linux | A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. | 14 Oct |
| CVE-2025-38181 | 5.5 medium | 1.0% | linux, debian, linux_kernel, debian_linux | In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). syzkaller reported a null-ptr-deref in sock_omalloc() while allocating a CALIPSO option. [0] The NULL is of struct sock, which was fetched by sk_to_full_sk() in calipso_req_setattr(). Since commit a1a5344ddbe8 ("tcp: avoid two atomic ops for syncookies"), reqsk->rsk_listener could be NULL when SYN Cookie is returned to its client, as hinted by the leading SYN Cookie log. Here are 3 options to fix the bug: 1) Return 0 in calipso_req_setattr() 2) Return an error in calipso_req_setattr() 3) Alaways set rsk_listener 1) is no go as it bypasses LSM, but 2) effectively disables SYN Cookie for CALIPSO. 3) is also no go as there have been many efforts to reduce atomic ops and make TCP robust against DDoS. See also commit 3b24d854cb35 ("tcp/dccp: do not touch listener sk_refcnt under synflood"). As of the blamed commit, SYN Cookie already did not need refcounting, and no one has stumbled on the bug for 9 years, so no CALIPSO user will care about SYN Cookie. Let's return an error in calipso_req_setattr() and calipso_req_delattr() in the SYN Cookie case. This can be reproduced by [1] on Fedora and now connect() of nc times out. [0]: TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] CPU: 3 UID: 0 PID: 12262 Comm: syz.1.2611 Not tainted 6.14.0 #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 RIP: 0010:read_pnet include/net/net_namespace.h:406 [inline] RIP: 0010:sock_net include/net/sock.h:655 [inline] RIP: 0010:sock_kmalloc+0x35/0x170 net/core/sock.c:2806 Code: 89 d5 41 54 55 89 f5 53 48 89 fb e8 25 e3 c6 fd e8 f0 91 e3 00 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 26 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b RSP: 0018:ffff88811af89038 EFLAGS: 00010216 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff888105266400 RDX: 0000000000000006 RSI: ffff88800c890000 RDI: 0000000000000030 RBP: 0000000000000050 R08: 0000000000000000 R09: ffff88810526640e R10: ffffed1020a4cc81 R11: ffff88810526640f R12: 0000000000000000 R13: 0000000000000820 R14: ffff888105266400 R15: 0000000000000050 FS: 00007f0653a07640(0000) GS:ffff88811af80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f863ba096f4 CR3: 00000000163c0005 CR4: 0000000000770ef0 PKRU: 80000000 Call Trace: <IRQ> ipv6_renew_options+0x279/0x950 net/ipv6/exthdrs.c:1288 calipso_req_setattr+0x181/0x340 net/ipv6/calipso.c:1204 calipso_req_setattr+0x56/0x80 net/netlabel/netlabel_calipso.c:597 netlbl_req_setattr+0x18a/0x440 net/netlabel/netlabel_kapi.c:1249 selinux_netlbl_inet_conn_request+0x1fb/0x320 security/selinux/netlabel.c:342 selinux_inet_conn_request+0x1eb/0x2c0 security/selinux/hooks.c:5551 security_inet_conn_request+0x50/0xa0 security/security.c:4945 tcp_v6_route_req+0x22c/0x550 net/ipv6/tcp_ipv6.c:825 tcp_conn_request+0xec8/0x2b70 net/ipv4/tcp_input.c:7275 tcp_v6_conn_request+0x1e3/0x440 net/ipv6/tcp_ipv6.c:1328 tcp_rcv_state_process+0xafa/0x52b0 net/ipv4/tcp_input.c:6781 tcp_v6_do_rcv+0x8a6/0x1a40 net/ipv6/tcp_ipv6.c:1667 tcp_v6_rcv+0x505e/0x5b50 net/ipv6/tcp_ipv6.c:1904 ip6_protocol_deliver_rcu+0x17c/0x1da0 net/ipv6/ip6_input.c:436 ip6_input_finish+0x103/0x180 net/ipv6/ip6_input.c:480 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip6_input+0x13c/0x6b0 net/ipv6/ip6_input.c:491 dst_input include/net/dst.h:469 [inline] ip6_rcv_finish net/ipv6/ip6_input.c:79 [inline] ip6_rcv_finish+0xb6/0x490 net/ipv6/ip6_input.c:69 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netf ---truncated--- | 15 Oct |
| CVE-2023-27538 | 5.5 medium | 1.0% | haxx, fedoraproject, libcurl, fedora, debian_linux | An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequent transfers if the configurations match. However, two SSH settings were omitted from the configuration check, allowing them to match easily, potentially leading to the reuse of an inappropriate connection. | 14 Oct |
| CVE-2022-48303 | 5.5 medium | 1.0% | gnu, fedoraproject, tar, fedora | GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters. | 14 Oct |
| CVE-2022-42722 | 5.5 medium | 1.0% | linux, fedoraproject, linux_kernel, fedora, debian_linux | In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices. | 14 Oct |
| CVE-2022-42721 | 5.5 medium | 1.0% | linux, fedoraproject, linux_kernel, fedora, debian_linux | A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code. | 14 Oct |
| CVE-2022-27943 | 5.5 medium | 1.0% | gnu, fedoraproject, gcc, fedora | libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. | 14 Oct |
| CVE-2020-13632 | 5.5 medium | 1.0% | sqlite, fedoraproject, fedora, ubuntu_linux | ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. | 14 Oct |
| CVE-2020-13631 | 5.5 medium | 1.0% | sqlite, fedoraproject, fedora, ubuntu_linux | SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. | 14 Oct |
| CVE-2020-13435 | 5.5 medium | 1.0% | sqlite, fedoraproject, fedora | SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. | 14 Oct |
| CVE-2020-13434 | 5.5 medium | 1.0% | sqlite, debian, debian_linux, fedora | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. | 14 Oct |
| CVE-2020-10029 | 5.5 medium | 1.0% | gnu, fedoraproject, glibc, fedora, ubuntu_linux | The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. | 14 Oct |
| CVE-2020-35496 | 5.5 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2020-35495 | 5.5 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2020-35493 | 5.5 medium | 1.0% | gnu, fedoraproject, binutils, fedora, cloud_backup | A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34. | 8 Oct |
| CVE-2022-33070 | 5.5 medium | 1.0% | protobuf-c_project, fedoraproject, protobuf-c, fedora | Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via unspecified vectors. | 8 Oct |
| CVE-2022-2208 | 5.5 medium | 1.0% | vim, fedoraproject, fedora | NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163. | 8 Oct |
| CVE-2020-27170 | 4.7 medium | 1.0% | linux, fedoraproject, linux_kernel, fedora, ubuntu_linux | An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit. | 8 Oct |
| CVE-2023-2462 | 4.3 medium | 1.0% | google, fedoraproject, chrome, fedora, debian_linux | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. (Chromium security severity: Medium) | Wed 28 Oct |
Download these 299 as CSV · subscribe to this list.
EPSS scores: 2026-10-29. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.