Filter
AND
AND
Versions
Fedoraproject FedoraUndici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
3.5
EPSS
0.04%
First published (updated )
Fedoraproject FedoraOpensc: memory use after free in authentic driver when updating token info
3.4
First published (updated )
CVE-2024-1048Grub2: grub2-set-bootflag can be abused by local (pseudo-)users
3.3
First published (updated )
Redhat Enterprise LinuxPackagekitd: use-after-free in idle function callback
3.3
EPSS
0.04%
First published (updated )
ubuntu/redisRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.
3.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraUndici's cookie header not cleared on cross-origin redirect in fetch
3.9
First published (updated )
composer/moodle/moodleMoodle: forum summary report shows students from other groups when in separate groups mode
3.3
First published (updated )
redhat/moodleMoodle: duplicating a bigbluebutton activity assigns the same meeting id
3.3
First published (updated )
Fedoraproject FedoraTemporary storage of plaintext passwords during password changes in matrix synapse
3.7
First published (updated )
ImageMagick ImageMagickImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in M…
3.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/mysql-8.0Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).…
2.7
First published (updated )
ubuntu/mysql-8.0Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Suppo…
3.1
First published (updated )
redhat/keylimeKeylime: attestation failure when the quote's signature does not validate
2.8
First published (updated )
ubuntu/open-vm-toolsVMware Tools Authentication Bypass Vulnerability
First published (updated )
Redhat Enterprise LinuxA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicio…
3.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/gitGit looks for localized messages in the wrong place
3.3
First published (updated )
Azul ZuluAn unspecified vulnerability in Java SE related to the Security component could allow an unauthentic…
3.7
First published (updated )
Azul ZuluVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (co…
3.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Azul ZuluAn unspecified vulnerability in Java SE related to the Security component could allow an unauthentic…
3.7
First published (updated )
Fedoraproject FedoraArm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pa…
3.8
First published (updated )
Gnu Grub2GRUB2 grub.cfg configuration file is created with the wrong permission (0644) allowing unprivileged …
3.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraImproper authorisation of /members discloses room membership to non-members
3.5
First published (updated )
Fedoraproject FedoraAdding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
3.5
First published (updated )
Nextcloud Nextcloud ServerAudit log is not properly logging unsetting of share expiration date
3.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.