Linux

Open redirect via user-controlled query parameter. The following products are affected: Acronis Cyber Protect 15 (Linux,

HTML injection via report name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before bu

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free bo

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where an unprivileged regular

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege e

Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruptio

IBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain sensitive information, c

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k

The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass int

IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) o

A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality

IBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker

An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kio

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a loc

A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM

A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows

IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J

IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user wi

IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-For

IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity au

IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some sit

IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle t

IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's

Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges.

In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. This

Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 w

The Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.1-13 didn’t mimic the permissions of the JVM be

IBM Security Guardium 10.5 stores user credentials in plain clear text which can be read by a local privileged user. IBM

IBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could allow an attacker to d

IBM Security Guardium 11.3 could allow a remote attacker to obtain sensitive information, caused by the failure to prope

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0 could allow a remote at

In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat.

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability du

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due t

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth

VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAuth

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a r

Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to ob

drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_rele

A specially crafted packet sent to the Fernhill SCADA Server Version 3.77 and earlier may cause an exception, causing th

VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation that allows a user to escalate to r

VMware Horizon Agent for Linux (prior to 22.x) contains a local privilege escalation as a user is able to change the def

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templa