Priority HIGH 77
DHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client.
CVSS 3.0HIGH 7.5· Adjacent network · No auth · No interaction · EPSS 0.97862 · Published 2018-05-17 · Fixed CWE-77
Priority HIGH 72
Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Confidentiality and Integrity via Configuration Dictionary.
CVSS 3.1HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00286 · Published 2024-05-08 · No fix listed CWE-20
Priority HIGH 72
A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.04794 · Published 2024-01-31 · Fixed in 2.39 CWE-122
Priority HIGH 66
A heap out-of-bounds read flaw was found in builtin.c in the gawk package.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00415 · Published 2023-09-25 · Partial fix · 5.1.1 CWE-125
Priority MEDIUM 63
A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00667 · Published 2023-10-30 · Fixed in 5.3.0 CWE-401
Priority MEDIUM 62
A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.08478 · Published 2023-06-30 · Fixed in 6.5-rc1 CWE-476
Priority MEDIUM 61
A flaw was found in the Libreoffice package.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.64878 · Published 2023-07-10 · Partial fix · 7.4.6, 7.5.1 CWE-20
Priority MEDIUM 58
A flaw was found in GLib.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00392 · Published 2023-09-14 · Partial fix CWE-400
Priority MEDIUM 58
A flaw was found in Binutils.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00379 · Published 2023-09-14 · Fix deferred CWE-457
Priority MEDIUM 58
A flaw was found in Binutils.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00347 · Published 2023-09-14 · No fix listed CWE-457
Priority MEDIUM 58
A flaw was found in Binutils.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0038 · Published 2023-09-14 · Fix deferred CWE-457
Priority MEDIUM 58
A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection() at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00319 · Published 2023-11-02 · Will not fix CWE-120
Priority MEDIUM 57
An integer overflow was found in the __vsyslog_internal function of the glibc library.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02689 · Published 2024-01-31 · Fixed in 2.39 CWE-131
Priority MEDIUM 52
The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01552 · Published 2024-01-16 · Fixed in 1.4.1 CWE-20
Priority MEDIUM 52
Stack-based buffer overflow in the read_article function in getarticle.c in newsx 1.6 allows remote attackers to execute arbitrary code via a news article containing a large number of lines starting with a period.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06654 · Published 2008-07-21 · No fix listed CWE-119
Priority MEDIUM 47
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02913 · Published 2023-07-10 · Fixed in 6.4-rc1 CWE-362
Priority MEDIUM 46
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.02593 · Published 2023-07-10 · Fixed in 6.4-rc1 CWE-362
Priority MEDIUM 42
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02495 · Published 2023-07-24 · Fixed in 6.4-rc1 CWE-362
Priority MEDIUM 42
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02374 · Published 2023-07-24 · Fixed in 6.4-rc1 CWE-362
Priority MEDIUM 41
An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.03153 · Published 2024-01-31 · Fixed in 2.39 CWE-122
Priority MEDIUM 41
A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01252 · Published 2024-02-22 · Partial fix · 3.1.0 CWE-248
Priority MEDIUM 41
Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and search outage) via crafted LDAP search reque…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.06555 · Published 2008-08-29 · Fixed CWE-399
Priority MEDIUM 40
An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply…
CVSS 4.0HIGH 8.7· Network · No auth · User interaction · EPSS 0.00497 · Published 2026-10-02 · Fixed in 0.1.9 CWE-290
Priority MEDIUM 40
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0406 · Published 2023-07-24 · Fixed in 6.4-rc1 CWE-476
Priority MEDIUM 40
A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0406 · Published 2023-07-24 · Fixed in 6.4-rc1 CWE-476
Load more
THREATIST.IORead the docs