Filters
Redhat Enterprise LinuxMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
5.3
First published (updated )
Redhat Enterprise LinuxMutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing
5.3
First published (updated )
Redhat Enterprise LinuxMutt: neomutt: to and cc email header fields are not protected by cryptographic signing
7.4
First published (updated )
Linux Linux kernelparport: Proper fix for array out-of-bounds access
7.8
First published (updated )
Linux-pam Linux-pamPam: libpam: libpam vulnerable to read hashed password
4.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Ansible Automation PlatformAap-gateway: xss on aap-gateway
6.1
First published (updated )
Redhat Enterprise LinuxQemu-kvm: usb: assertion failure in usb_ep_get()
5.5
EPSS
0.04%
First published (updated )
Redhat Enterprise LinuxLibopensc: heap buffer overflow in openpgp driver when generating key
2.9
EPSS
0.04%
First published (updated )
Redhat Enterprise LinuxLibopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc
3.9
First published (updated )
Redhat Enterprise LinuxLibopensc: incorrect handling length of buffers or files in libopensc
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise LinuxLibopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init
3.9
First published (updated )
Redhat Enterprise LinuxLibopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc
3.9
First published (updated )
Redhat Enterprise LinuxLibopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init
3.9
First published (updated )
Redhat Enterprise LinuxLibopensc: incorrect handling of the length of buffers or files in pkcs15init
6.8
First published (updated )
Redhat Enterprise LinuxLast updated 17 September 2024
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.keycloak:keycloak-servicesWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adapters
8.1
EPSS
0.24%
First published (updated )
Redhat Enterprise LinuxQemu-kvm: virtio-net: queue index out-of-bounds access in software rss
6.8
EPSS
0.04%
First published (updated )
Redhat Enterprise LinuxPoppler: pdfinfo: crash in broken documents when using -dests parameter
7.5
EPSS
0.05%
First published (updated )
Redhat Openshift Container PlatformCri-o: malicious container can create symlink on host
8.1
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise LinuxNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file
6.7
EPSS
0.04%
First published (updated )
maven/org.keycloak:keycloak-servicesKeycloak: potential bypass of brute force protection
6.5
First published (updated )
Redhat Enterprise Linux For Power Little Endian EusBooth: specially crafted hash can lead to invalid hmac being accepted by booth server
5.9
First published (updated )
Redhat Enterprise LinuxPodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack
7.7
First published (updated )
Redhat Enterprise Linux AusFreeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/FreeIPAFreeipa: delegation rules allow a proxy service to impersonate any user to access another target service
8.8
First published (updated )
Fedoraproject FedoraThe implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a succes…
6.5
First published (updated )
Fedoraproject FedoraOpensc: memory use after free in authentic driver when updating token info
3.4
First published (updated )
Microsoft Windows Server 2012Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities
7.5
First published (updated )
Linux Linux kernelKernel: stack overflow problem in open vswitch kernel module leading to dos
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Directory Server389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
5.5
First published (updated )
CVE-2024-0914Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)
5.9
First published (updated )
redhat/shimShim: out of bounds read when parsing mz binaries
7.1
EPSS
0.04%
First published (updated )
CVE-2023-40550Shim: out-of-bound read in verify_buffer_sbat()
5.5
EPSS
0.04%
First published (updated )
pip/ansible-coreAnsible-core: possible information leak in tasks that ignore ansible_no_log configuration
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise LinuxKernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos
5.5
EPSS
0.04%
First published (updated )
Linux Linux kernelKernel: deadlock leading to denial of service in tipc_crypto_key_revoke
5.5
EPSS
0.04%
First published (updated )
Linux Linux kernelKernel: nf_tables: pointer math issue in nft_byteorder_eval()
6.6
EPSS
0.04%
First published (updated )
Redhat Enterprise LinuxKernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication
6.5
EPSS
0.04%
First published (updated )
Linux Linux kernelKernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c
7.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/gnutls28Gnutls: incomplete fix for cve-2023-5981
7.5
EPSS
0.18%
First published (updated )
Redhat Enterprise LinuxRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. T…
5.5
EPSS
0.04%
First published (updated )
Linux Linux kernelKernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.
5.5
EPSS
0.04%
First published (updated )
Redhat Enterprise LinuxXorg-x11-server: selinux context corruption
7.8
EPSS
0.04%
First published (updated )
Redhat Enterprise LinuxXorg-x11-server: selinux unlabeled glx pbuffer
5.5
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-1048Grub2: grub2-set-bootflag can be abused by local (pseudo-)users
3.3
First published (updated )
Redhat Enterprise Linux EusXorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
7.8
First published (updated )
Redhat Enterprise LinuxPackagekitd: use-after-free in idle function callback
3.3
EPSS
0.04%
First published (updated )
ubuntu/linuxKernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function
7.8
EPSS
0.04%
First published (updated )
Redhat Enterprise LinuxKernel: refcount leak in ctnetlink_create_conntrack()
6.1
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.