Priority HIGH 72
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01367 · Published 2025-06-12 · Partial fix · 2.14.4, 2.12.5-7.el10_0 +21 CWE-787
Priority MEDIUM 64
A flaw was found in libsoup.
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.00876 · Published 2025-04-03 · Partial fix · 3.6.5, 3.6.5-3.el10_0 +10 CWE-125
Priority HIGH 72
A flaw was found in rsync which could be triggered when rsync compares file checksums.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.08641 · Published 2025-01-14 · Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908
Priority CRITICAL 93KEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28058 · Published 2024-01-31 · Fixed in 6.8 CWE-416
Priority LOW 34
A flaw was found in the X.Org server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00356 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-787
Priority LOW 25
A flaw was found in the X.Org server.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00321 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-158
Priority MEDIUM 46
A flaw was found in X.Org server.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02106 · Published 2024-01-18 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787
Priority LOW 30
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00574 · Published 2024-01-10 · Partial fix · 4.6.8-5.el7_9.16, 8090020231201152514.3387e3d0 +7 CWE-352
Priority MEDIUM 47
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04322 · Published 2023-12-10 · Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190
Priority HIGH 77
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.78513 · Published 2023-11-03 · Fixed in 6.4, 7:3.4.14-15.el6_10.1 +13 CWE-120
Priority LOW 36
A vulnerability was found in insights-client.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00271 · Published 2023-11-01 · Partial fix · 3.1.9-1.el7_9, 3.2.2-1.el8_8 +6 CWE-379
Priority LOW 35
A out-of-bounds write flaw was found in the xorg-x11-server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00608 · Published 2023-10-25 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-24.el7_9 +14 CWE-787
Priority LOW 36
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2023-08-23 · Fixed in 1.24.52-2.el7_9, 1.28.36-3.el8_8 +6 CWE-285
Priority LOW 38
A vulnerability was found in X.Org.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00899 · Published 2023-03-27 · Partial fix CWE-416
Priority MEDIUM 40
A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01944 · Published 2023-03-27 · Fixed CWE-190
Priority CRITICAL 97KEV
A vulnerability was found in WebKit.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01556 · Published 2023-03-06 · Partial fix CWE-119
Priority HIGH 73
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0095 · Published 2023-02-01 · Fixed CWE-90
Priority LOW 25
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:505…
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00517 · Published 2022-09-01 · Fixed CWE-200
Priority LOW 35
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00931 · Published 2022-09-01 · Fixed CWE-416
Priority MEDIUM 45
A privilege escalation flaw was found in Podman.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04171 · Published 2022-04-29 · Partial fix · 3.4, 1.7.2 CWE-281
Priority LOW 34
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2022-03-25 · Fixed CWE-281
Priority LOW 39
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00658 · Published 2022-03-04 · Partial fix CWE-862
Priority HIGH 78
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.73589 · Published 2022-02-21 · Fixed in 4.13.17, 4.14.12 +1 CWE-125
Priority LOW 37
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02014 · Published 2022-02-18 · Fixed CWE-415
Priority LOW 39
A flaw was found in the way Samba maps domain users to local users.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01625 · Published 2022-02-18 · Partial fix CWE-20
Load more
THREATIST.IORead the docs