Priority CRITICAL 93KEV
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28058 · Published 2024-01-31 · Fixed in 6.8 CWE-416
Priority LOW 34
A flaw was found in the X.Org server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00356 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-787
Priority LOW 25
A flaw was found in the X.Org server.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00321 · Published 2024-01-18 · Partial fix · 21.1.11, 1.20.4-27.el7_9 +4 CWE-158
Priority MEDIUM 46
A flaw was found in X.Org server.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02106 · Published 2024-01-18 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-27.el7_9 +13 CWE-787
Priority LOW 30
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00574 · Published 2024-01-10 · Partial fix · 4.6.8-5.el7_9.16, 8090020231201152514.3387e3d0 +7 CWE-352
Priority MEDIUM 47
A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04322 · Published 2023-12-10 · Partial fix · 4.2.4-6, 4.2.4-7 +29 CWE-190
Priority HIGH 77
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.78513 · Published 2023-11-03 · Fixed in 6.4, 7:3.4.14-15.el6_10.1 +13 CWE-120
Priority LOW 35
A out-of-bounds write flaw was found in the xorg-x11-server.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00608 · Published 2023-10-25 · Partial fix · 1.1.0-25.el6_10.13, 1.20.4-24.el7_9 +14 CWE-787
Priority LOW 36
A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00241 · Published 2023-08-23 · Fixed in 1.24.52-2.el7_9, 1.28.36-3.el8_8 +6 CWE-285
Priority CRITICAL 97KEV
A vulnerability was found in WebKit.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01556 · Published 2023-03-06 · Partial fix CWE-119
Priority HIGH 73
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0095 · Published 2023-02-01 · Fixed CWE-90
Priority LOW 25
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:505…
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00517 · Published 2022-09-01 · Fixed CWE-200
Priority LOW 35
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117…
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00931 · Published 2022-09-01 · Fixed CWE-416
Priority MEDIUM 45
A privilege escalation flaw was found in Podman.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04171 · Published 2022-04-29 · Partial fix · 3.4, 1.7.2 CWE-281
Priority LOW 34
A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00382 · Published 2022-03-25 · Fixed CWE-281
Priority LOW 39
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00658 · Published 2022-03-04 · Partial fix CWE-862
Priority HIGH 78
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.73589 · Published 2022-02-21 · Fixed in 4.13.17, 4.14.12 +1 CWE-125
Priority LOW 37
A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02014 · Published 2022-02-18 · Fixed CWE-415
Priority LOW 35
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01687 · Published 2022-02-18 · Fixed CWE-287
Priority LOW 39
A flaw was found in the way Samba maps domain users to local users.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01625 · Published 2022-02-18 · Partial fix CWE-20
Priority LOW 30
A flaw was found in the way samba implemented SMB1 authentication.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01766 · Published 2022-02-18 · Partial fix CWE-287
Priority CRITICAL 93KEV
A local privilege escalation vulnerability was found on polkit's pkexec utility.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.94921 · Published 2022-01-28 · Fixed CWE-787
Priority LOW 28
A flaw was found in the hivex library.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.05151 · Published 2021-12-23 · Partial fix CWE-400
Priority LOW 30
A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.02814 · Published 2021-11-23 · Partial fix CWE-79
Priority CRITICAL 98KEV
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-09-16 · Fixed CWE-918
Load more
THREATIST.IORead the docs