Redhat

A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can t

A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can r

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in

A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the u

A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JB

In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowin

A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Di

A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logic

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overfl

A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by ex

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission spe

A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in th

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This i

An out-of-bounds read vulnerability was found in smbCalcSize in fs/smb/client/netmisc.c in the Linux Kernel. This issue

A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the

A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from resp

A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such a

An out-of-memory flaw was found in libtiff. Passing a crafted tiff file to TIFFOpen() API may allow a remote attacker to

A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.

A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functional

An out-of-bounds read vulnerability was found in the NVMe-oF/TCP subsystem in the Linux kernel. This issue may allow a r

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball s

The course upload preview contained an XSS risk for users uploading unsafe data.

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR ris

A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the q

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possib

A flaw was found in Quay. Clickjacking is when an attacker uses multiple transparent or opaque layers to trick a user in

An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key enc

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process u

A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process

A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back butt

A flaw was found in KVM. An improper check in svm_set_x2apic_msr_interception() may allow direct access to host x2apic m

A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset

A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain socke

A use-after-free flaw was found in the Linux kernel’s mm/mremap memory address space accounting source code. This issue

A flaw was found in Squid. The limits applied for validation of HTTP response headers are applied before caching. Howeve

A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permis

Squid is vulnerable to Denial of Service, where a remote attacker can perform DoS by sending ftp:// URLs in HTTP Reques

Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform R

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NU

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer

NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a ma

NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.

A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to

A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.

A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.