Redhat

A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has acc

A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub

In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'flo

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' a

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' a

drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator cla

A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_recor

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the

An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect r

With shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If INVPCID is executed wit

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-fre

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a

A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may l

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potenti

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.

A flaw was found in moodle where global search results could include author information on some activities where a user

A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.

A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional sa

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of

A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use t

This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an

A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointe

Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course b

A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.

A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lea

A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a loc

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public r

A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM

A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. T

Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be

A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability

Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash

A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash p

A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.

A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.

A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directo

A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data. The highest threat fro

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and po

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a r

A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logg

The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was

jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use-after-free caused by a tr

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was foun

A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability w

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerabilit

A flaw was found in keycloak where keycloak may fail to logout user session if the logout request comes from external SA