Redhat

A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account du

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certt

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Cert

A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the expo

A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for co

A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially c

A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function r

A flaw was found in Red Hat Advanced Cluster Management through versions 2.10, before 2.10.7, 2.11, before 2.11.4, and 2

A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server. All /v1/*

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled director

A flaw was found in Infinispan CLI. A sensitive password, decoded from a Base64-encoded Kubernetes secret, is processed

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_

A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it require

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE)

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privilege

A flaw was found in the GIF parser of GdkPixbuf’s LZW decoder. When an invalid symbol is encountered during decompressio

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when ope

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inpu

A flaw was found in GIMP. An integer overflow vulnerability exists in the GIMP "Despeckle" plug-in. The issue occurs du

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a

A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped in

A vulnerability has been identified in the libarchive library. This flaw involves an 'off-by-one' miscalculation when ha

A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be trigge

A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the

A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data

A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client

There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data blocks. If a c

Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input

A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace

A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a s

A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a se

A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted gi

A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links

A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't bee

A flaw was found in Keycloak. The org.keycloak.authorization package may be vulnerable to circumventing required actions

A flaw was found in the mod_auth_openidc module for Apache httpd. This flaw allows a remote, unauthenticated attacker to

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input

A flaw was found in fig2dev. This vulnerability allows availability via local input manipulation via genge_itp_spline fu

In xfig diagramming tool, a stack-overflow while running fig2dev allows memory corruption via local input manipulation v

A flaw was found in xfig. This vulnerability allows possible code execution via local input manipulation via bezier_spli

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vu

A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_ins

A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.

A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.

A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.

A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multipl

A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled pa