Priority HIGH 74
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.82813 · Published 2019-08-13 · Partial fix · 0.0.0-20190813141303-74dc4d7220e7 CWE-400
Priority MEDIUM 54
Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.08944 · Published 2017-10-05 · Partial fix
Priority MEDIUM 45
A privilege escalation flaw was found in Podman.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04171 · Published 2022-04-29 · Partial fix · 3.4, 1.7.2 CWE-281
Priority MEDIUM 41
Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05299 · Published 2019-09-30 · Partial fix CWE-444
Priority MEDIUM 40
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04693 · Published 2019-10-24 · Partial fix CWE-436
Priority LOW 38
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02704 · Published 2019-07-30 · Fixed CWE-476
Priority LOW 36
A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.01429 · Published 2022-04-04 · Partial fix · 4.0.3 CWE-276
Priority LOW 36
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write().
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01169 · Published 2022-03-18 · Partial fix CWE-416
Priority LOW 34
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2022-03-25 · Fixed CWE-281
Priority LOW 32
An issue was discovered in net/http in Go 1.11.5.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02196 · Published 2019-03-13 · Partial fix CWE-93
Priority LOW 31
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00469 · Published 2022-07-06 · Partial fix CWE-787
Priority LOW 26
A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption).
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00533 · Published 2022-03-04 · Partial fix CWE-401
Priority LOW 25
A flaw was found in the Linux kernel.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00297 · Published 2022-08-26 · Partial fix CWE-400
Priority LOW 21
A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.
CVSS 3.1MEDIUM 4.5· Local · Low privileges · No interaction · EPSS 0.00484 · Published 2022-07-06 · Partial fix CWE-787
Priority LOW 21
A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area.
CVSS 3.1MEDIUM 4.5· Local · Low privileges · No interaction · EPSS 0.00475 · Published 2022-07-06 · Partial fix CWE-787
THREATIST.IORead the docs