Redhat

A flaw was found in the HFS filesystem. When reading an HFS volume's name at grub_fs_mount(), the HFS filesystem driver

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loo

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized acti

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthori

A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluat

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued fo

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if

An out-of-bounds write flaw was found in X.Org and Xwayland. The function GetBarrierDevice() searches for the pointer de

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 group, it will resiz

A heap overflow flaw was found in X.Org and Xwayland. The computation of the length in XkbSizeKeySyms() differs from wha

A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText() allocates a fixed-sized buffer on

A use-after-free flaw was found in X.Org and Xwayland. The root cursor is referenced in the X server as a global variabl

A flaw was found in grub2. The calculation of the translation buffer when reading a language .mo file in grub_gettext_ge

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be

A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control manageme

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.

A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memor

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-cont

A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-

A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a defaul

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's mach

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to m

IBM App Connect Enterprise Certified Container 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, and 12.3 could allow a remote authent

In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field b

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacke

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker tha

A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.

An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensit

In the Linux kernel, the following vulnerability has been resolved: parport: Proper fix for array out-of-bounds access

A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly

A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim

A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allow

A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batchi

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. Th

A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is prov

A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. Th

A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers/storage lib

A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are

A vulnerability was found in 3Scale. There is no auth mechanism to see a PDF invoice of a Developer user if the URL is k

A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file pa

A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to

A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an atta

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card

A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie

A vulnerability was found in Keycloak. Expired OTP codes are still usable when using FreeOTP when the OTP token period i

An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and

An authentication bypass vulnerability has been identified in Pulpcore when deployed with Gunicorn versions prior to 22.