---
title: "vadz vulnerabilities: CVEs, CISA KEV and security advisories"
url: https://radicalnotion.ai/vendor/vadz
type: vendor
description: "vadz has 125 published CVEs, 0 in CISA KEV and 64 with public exploits."
updated: 2023-05-09
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# vadz vulnerabilities

- **Published CVEs:** 125
- **In CISA KEV:** 0
- **With a public exploit:** 64
- **With a patch:** 124
- **Average CVSS:** 7.2
- **CVEs in the last two years:** 0
- **First CVE:** 2013-09-28
- **Latest CVE:** 2023-05-09

## Severity breakdown

| Severity | CVEs |
| --- | --- |
| Critical | 9 |
| High | 56 |
| Medium | 60 |
| Low | 0 |
| Unscored | 0 |

## Most affected products

| Product | CVEs |
| --- | --- |
| [libtiff](https://radicalnotion.ai/vendor/vadz/libtiff) | 125 |

## Most common weakness types

| CWE | Name | CVEs |
| --- | --- | --- |
| [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 27 |
| [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 24 |
| [CWE-787](https://radicalnotion.ai/cwe/cwe-787) | Out-of-bounds Write | 16 |
| [CWE-369](https://radicalnotion.ai/cwe/cwe-369) | Divide By Zero | 12 |
| [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 11 |
| [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 8 |
| [CWE-772](https://radicalnotion.ai/cwe/cwe-772) | Missing Release of Resource after Effective Lifetime | 7 |
| [CWE-190](https://radicalnotion.ai/cwe/cwe-190) | Integer Overflow or Wraparound | 4 |

## Assigning CNAs

| CNA | CVEs |
| --- | --- |
| [mitre](https://radicalnotion.ai/cna/mitre) | 104 |
| [GitLab](https://radicalnotion.ai/cna/gitlab) | 12 |
| [redhat](https://radicalnotion.ai/cna/redhat) | 6 |
| [talos](https://radicalnotion.ai/cna/talos) | 1 |
| [certcc](https://radicalnotion.ai/cna/certcc) | 1 |
| [debian](https://radicalnotion.ai/cna/debian) | 1 |

## CVEs by year

| Year | CVEs published |
| --- | --- |
| 2016 | 26 |
| 2017 | 58 |
| 2018 | 21 |
| 2019 | 1 |
| 2020 | 0 |
| 2021 | 0 |
| 2022 | 16 |
| 2023 | 2 |

## Latest CVEs

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2023-30086 | - | medium | 5.5 | 0.3% | No | 2023-05-09 |
| CVE-2022-4645 | - | medium | 6.8 | 0.4% | No | 2023-03-03 |
| CVE-2022-1355 | - | medium | 6.1 | 0.6% | No | 2022-08-31 |
| CVE-2022-2868 | - | medium | 5.5 | 0.3% | No | 2022-08-17 |
| CVE-2022-2869 | - | medium | 5.5 | 0.3% | No | 2022-08-17 |
| CVE-2022-2867 | - | medium | 5.5 | 0.3% | No | 2022-08-17 |
| CVE-2022-34526 | - | medium | 6.5 | 1.9% | No | 2022-07-29 |
| CVE-2022-2056 | - | medium | 6.5 | 1.3% | No | 2022-06-30 |
| CVE-2022-2057 | - | medium | 6.5 | 1.3% | No | 2022-06-30 |
| CVE-2022-2058 | - | medium | 6.5 | 1.3% | No | 2022-06-30 |
| CVE-2022-1623 | - | medium | 5.5 | 1.3% | No | 2022-05-11 |
| CVE-2022-1622 | - | medium | 5.5 | 1.7% | No | 2022-05-11 |

## Frequently asked questions

### How many CVEs does vadz have?

vadz has 125 published CVE records since 2013, including 0 in the last two years.

### How many vadz CVEs are in CISA KEV?

None of vadz's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

### Which vadz products have the most CVEs?

The vadz products with the most published CVEs are libtiff.

### What are the most common weakness types in vadz CVEs?

vadz's CVEs most often map to these CWE weakness types: CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-369 (Divide By Zero).

### Are there public exploits for vadz vulnerabilities?

Yes — 64 of vadz's CVEs have a known public exploit.

### How many critical vadz vulnerabilities are there?

vadz has 9 critical and 56 high-severity CVEs.

### What is the average severity of vadz CVEs?

The average CVSS base score across vadz's scored CVEs is 7.2.

## Related vendors

- [Accellion](https://radicalnotion.ai/vendor/accellion) (126 CVEs)
- [Webmin](https://radicalnotion.ai/vendor/webmin) (126 CVEs)
- [Axis Communications](https://radicalnotion.ai/vendor/axis) (126 CVEs)
- [Johnson Controls](https://radicalnotion.ai/vendor/johnson-controls) (126 CVEs)
- [libming](https://radicalnotion.ai/vendor/libming) (126 CVEs)
- [Philips](https://radicalnotion.ai/vendor/philips) (125 CVEs)
- [bPlugins](https://radicalnotion.ai/vendor/bplugins) (125 CVEs)
- [Mambo](https://radicalnotion.ai/vendor/mambo) (125 CVEs)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/vadz). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.