Priority CRITICAL 93KEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28058 · Published 2024-01-31 · Fixed in 6.8 CWE-416
Priority LOW 34
A flaw was found in the X.Org server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00356 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-787
Priority LOW 25
A flaw was found in the X.Org server.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00321 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-158
Priority MEDIUM 46
A flaw was found in X.Org server.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02106 · Published 2024-01-18 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787
Priority LOW 30
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00574 · Published 2024-01-10 · Partial fix · 4.6.8-5.el7_9.16, 8090020231201152514.3387e3d0 +7 CWE-352
Priority MEDIUM 47
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04322 · Published 2023-12-10 · Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190
Priority LOW 36
A vulnerability was found in insights-client.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00271 · Published 2023-11-01 · Partial fix · 3.1.9-1.el7_9, 3.2.2-1.el8_8 +6 CWE-379
Priority LOW 35
A out-of-bounds write flaw was found in the xorg-x11-server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00608 · Published 2023-10-25 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-24.el7_9 +14 CWE-787
Priority LOW 36
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2023-08-23 · Fixed in 1.24.52-2.el7_9, 1.28.36-3.el8_8 +6 CWE-285
Priority LOW 38
A vulnerability was found in X.Org.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00899 · Published 2023-03-27 · Partial fix CWE-416
Priority CRITICAL 97KEV
A vulnerability was found in WebKit.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01556 · Published 2023-03-06 · Partial fix CWE-119
Priority HIGH 73
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0095 · Published 2023-02-01 · Fixed CWE-90
Priority LOW 34
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2022-03-25 · Fixed CWE-281
Priority LOW 39
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00658 · Published 2022-03-04 · Partial fix CWE-862
Priority HIGH 78
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.73589 · Published 2022-02-21 · Fixed in 4.13.17, 4.14.12 +1 CWE-125
Priority LOW 37
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02014 · Published 2022-02-18 · Fixed CWE-415
Priority LOW 35
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01687 · Published 2022-02-18 · Fixed CWE-287
Priority LOW 39
A flaw was found in the way Samba maps domain users to local users.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01625 · Published 2022-02-18 · Partial fix CWE-20
Priority LOW 30
A flaw was found in the way samba implemented SMB1 authentication.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01766 · Published 2022-02-18 · Partial fix CWE-287
Priority CRITICAL 93KEV
A local privilege escalation vulnerability was found on polkit's pkexec utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.94921 · Published 2022-01-28 · Fixed CWE-787
Priority LOW 18
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.
CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.01094 · Published 2021-05-14 · No fix listed CWE-190
Priority LOW 34
A logic issue was addressed with improved validation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00404 · Published 2020-10-27 · Partial fix · 13.3, 13.0 +3 CWE-346
Priority MEDIUM 43
A use after free issue was addressed with improved memory management.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02335 · Published 2020-10-27 · Partial fix · 13.3, 13.0 +3 CWE-416
Priority MEDIUM 42
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02271 · Published 2020-10-27 · Partial fix · 13.3, 6.1 +4 CWE-787
Priority MEDIUM 42
Multiple memory corruption issues were addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02106 · Published 2020-10-27 · Partial fix · 13.3, 13.0 +3 CWE-787
Load more
THREATIST.IORead the docs