Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

796 records

Vendor: Red Hat Component: Enterprise Linux Eus Clear all filters
TI-2026-42010 CVE-2026-58379 · GHSA-rx3j-28q8-xw3m

Gimp: gimp: heap buffer overflow in read_channel_data()

Priority LOW 34

A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00471 Published 2026-07-03 Fixed in 2:3.0.4-4.el9_8.5, 2:2.99.8-4.el9_2.7 +2 CWE-122
TI-2026-34021 CVE-2026-46300 · GHSA-47jg-vqrv-5f8v

Linux kernel skb coalescing drops shared-frag marker

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.1613 Published 2026-05-23 Fixed in 5.10.257, 5.15.208 +6 CWE-456
TI-2026-23989 CVE-2026-31431 · GHSA-2274-3hgr-wxv6

crypto: algif_aead - Revert to operating out-of-place

Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669
TI-2026-26741 CVE-2026-34486 · GHSA-69r9-qgr7-g2wj

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Priority CRITICAL 90KEV

Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.98503 Published 2026-04-09 Partial fix · 11.0.21, 10.1.54 +1 CWE-311
TI-2026-17483 CVE-2026-21710 · GHSA-xv6w-gxj8-v943

Resource allocation without limits in NodeJS node

Priority MEDIUM 60

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.25443 Published 2026-03-30 Fixed CWE-770
TI-2025-38540 CVE-2025-62230 · GHSA-892r-x96w-jh76

Xorg: xwayland: use-after-free in xkb client resource removal

Priority LOW 34

A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00282 Published 2025-10-30 Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-416
TI-2025-38541 CVE-2025-62231 · GHSA-h4r4-6hvf-34r8

Xorg: xmayland: value overflow in xkbsetcompatmap()

Priority LOW 34

A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00297 Published 2025-10-30 Partial fix · 24.1.9, 24.1.5-5.el10_0 +32 CWE-190
TI-2025-22512 CVE-2025-31277 · GHSA-vrfh-8v52-6452

Memory corruption in Apple Safari

Priority CRITICAL 97KEV

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01678 Published 2025-07-29 Partial fix · 18.6, 15.6 +2 CWE-119
TI-2025-02756 CVE-2025-3155 · GHSA-h7mx-548v-cr9r

Yelp: arbitrary file read

Priority HIGH 66

A flaw was found in Yelp.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.13121 Published 2025-04-03 Partial fix · 42.2-8, 2:3.28.1-3.el8_10.1 +9 CWE-601
TI-2025-01513 CVE-2025-1756 · GHSA-f5w3-73h4-jpcm

MongoDB Shell may be susceptible to local privilege escalation in Windows

Priority LOW 35

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2025-02-27 Fixed in 2.3.0 CWE-426
TI-2024-11211 CVE-2024-12087 · GHSA-9x68-7qq6-v523

Rsync: path traversal vulnerability in rsync

Priority HIGH 66

A path traversal vulnerability exists in rsync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02259 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.0.6-12.el6_10.2 +11 CWE-22
TI-2024-11209 CVE-2024-12085 · GHSA-xh5q-pch5-g3xq

Rsync: info leak via uninitialized stack contents

Priority HIGH 72

A flaw was found in rsync which could be triggered when rsync compares file checksums.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08641 Published 2025-01-14 Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908
TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf

Path traversal in containers/storage

Priority LOW 32

A vulnerability was found in Podman, Buildah, and CRI-O.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01325 Published 2024-10-15 Partial fix · 1.55.1, 8100020241101101019.afee755d +181 CWE-22
TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp

Buildah: buildah allows arbitrary directory mount

Priority LOW 34

A vulnerability was found in Buildah.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00392 Published 2024-10-09 Partial fix · 1.38.0, 8100020241023085649.afee755d +192 CWE-22
TI-2024-05929 CVE-2024-6387 · GHSA-2x8c-95vh-gfv4

Openssh: regresshion - race condition in ssh allows rce/dos

Priority HIGH 82

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.99506 Published 2024-07-01 Partial fix · 8.7p1-38.el9_4.1, 8.7p1-12.el9_0.1 +5 CWE-364
Load more