Filter
-Infinity
0
Trending
pip/requestsUnintended leak of Proxy-Authorization header in requests
6.1
First published (updated )
ubuntu/c-aresBuffer Underwrite in ares_inet_net_pton()
6.4
First published (updated )
Red Hat FedoraAutoTools does not set CARES_RANDOM_FILE during cross compilation
6.5
First published (updated )
Fedora RepositoryFedora Repository fedoraIntCallUser default credentials
8.7
EPSS
0.04%
First published (updated )
Fedora RepositoryFedora Repository archive extraction path traversal
8.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Red Hat FedoraInsufficient randomness in generation of DNS query IDs in c-ares
6.5
First published (updated )
ubuntu/avahiA vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus…
6.2
First published (updated )
Red Hat FedoraBottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file.
7.8
First published (updated )
Red Hat Directory ServerMultiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fe…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Red Hat Directory ServerRed Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1…
7.1
First published (updated )
feedback quested garding depcation of TLS 1.0/1.1
First published (updated )
Pacemaker/Corosync Configuration SystemThe pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie …
4.3
First published (updated )
linux-distros application for CentOS Project's Hyperscale SIG
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
linux-distros application for CentOS Project's Hyperscale SIG
First published (updated )
CVE-2024-6387: RCE in OpenSSH's server, on glibc-based Linux systems
First published (updated )
The RegisterWhat can be done to protect open source devs from next xz backdoor drama?
First published (updated )
News
The Registerdnsmasqdnsmasq, as shipped with Fedora and Red Hat Enterprise Linux, has a default configuration that makes…
First published (updated )
BleepingComputerCISA orders federal agencies to patch Looney Tunables Linux bug
First published (updated )
News
BleepingComputerNever miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2023-4911: Local Privilege Escalation in the glibc's ld.so
First published (updated )
FedoraFedora 18 is found to be vulnerable to the blind command execution on the lock screen, and Fedora 19…
First published (updated )
Red Hat Enterprise LinuxIt was found that xrdb, the X server resource database utility, did not properly sanitize system hos…
First published (updated )
Red Hat Enterprise LinuxAnders Kaseorg and Evan Broder reported a flaw in the way sudo handled duplicated environment variab…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Red Hat Enterprise Linux High AvailabilityThe pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an htt…
6.8
First published (updated )
FedoraReported by Michael Simms: Any user can crash init with a single command Version-Release number of…
7
First published (updated )
EvolutionA flaw was found in bogofilter's/bogolexer's base64 where it could overwrite memory before its heap …
First published (updated )
MoodleMoodle upstream has released v1.9.9 and v1.8.13: <a href="http://docs.moodle.org/en/Moodle_1.9.9_re…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.