Filter
AND
AND
Red Hat Enterprise LinuxLibopensc: incorrect handling length of buffers or files in libopensc
4.3
First published (updated )
Red Hat Enterprise LinuxLibopensc: incorrect handling of the length of buffers or files in pkcs15init
6.8
First published (updated )
Red Hat Enterprise LinuxNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file
6.7
EPSS
0.04%
First published (updated )
Red Hat OpenShift Container PlatformKeycloak: reflected xss via wildcard in oidc redirect_uri
5.4
EPSS
0.10%
First published (updated )
Moodle MoodleMoodle: stored xss in quiz grading report via user id number
5.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/rh-sso7-keycloakKeycloak: session takeover with oidc offline refreshtokens
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/kernelA flaw was found in nfsd. A failure to clear umask after processing an open or create operation resu…
4.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/grub2GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing.
6.4
First published (updated )
redhat/heketiWhile requesting a new block volume creation, at Heketi we dump the sensitive gluster-block volumes …
5.5
First published (updated )
redhat/containernetworking-pluginsCNI network plugins create network bridges that IPv6 router advertisements by default. An attacker a…
First published (updated )
Fujitsu Interstage Application ServerWeak Encryption
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/ansibleAnsible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, i…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle FLEXCUBE Investor ServicingGoogle Guava is vulnerable to a denial of service, caused by improper eager allocation checks in the…
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.