Redhat

A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking s

A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This is

A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethe

A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secu

IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @e

Information exposure through microarchitectural state after transient execution in certain vector execution units for so

A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file nam

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filt

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID

A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authen

A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device i

A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device in

A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove functio

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a ma

A flaw was found in the Linux kernel’s IP framework for transforming packets (XFRM subsystem). This issue may allow a ma

An uncontrolled resource consumption flaw was found in openstack-neutron. This flaw allows a remote authenticated user t

An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user ge

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulti

A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to mem

A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue m

A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue

A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of servic

A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. Th

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling o

A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side a

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. Wh

There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_im

IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosi

IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation

An out-of-bounds read flaw was found in w3m, in the growbuf_to_Str function in indep.c. This issue may allow an attacker

An out-of-bounds read flaw was found in w3m, in the Strnew_size function in Str.c. This issue may allow an attacker to c

A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the curr

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updat

A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a sma

A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This fl

A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can

A floating point exception vulnerability was found in sox, in the read_samples function at sox/src/voc.c:334:18. This fl

A floating point exception vulnerability was found in sox, in the lsx_aiffstartwrite function at sox/src/aiff.c:622:58.

IBM Watson CP4D Data Stores 4.6.0 does not properly allocate resources without limits or throttling which could allow a

A flaw was found in the Libreoffice package. An attacker can craft an odb containing a "database/script" file with a SCR

Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the

A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was

A vulnerability was found in quarkus-core. This vulnerability occurs because the TLS protocol configured with quarkus.ht

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to