VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability

Underflow in PHP-FPM can lead to RCE

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

mod_proxy SSRF

WebKitGTK Memory Corruption Vulnerability

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g

Use-after-free in Linux kernel's netfilter: nf_tables component

Glibc: buffer overflow in ld.so leading to privilege escalation

Linux Kernel Privilege Escalation Vulnerability

Linux Kernel Improper Authentication Vulnerability

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Linux Kernel Improper Privilege Management Vulnerability

Apache HTTP Server Privilege Escalation Vulnerability

Mozilla Firefox Information Disclosure Vulnerability

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

ImageMagick Arbitrary File Deletion Vulnerability

Oracle Java SE Integrity Check Vulnerability

Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication

net-snmp provides various tools relating to the Simple Network Management Protocol

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters

A privilege escalation flaw was found in Podman

A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes…

A flaw was found in the KVM's AMD code for supporting SVM nested virtualization

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP…

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service…

Openssh: regresshion - race condition in ssh allows rce/dos

When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL…

A flaw was found in the way Samba maps domain users to local users

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a…

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges,…

A flaw was found in the X.Org server

A vulnerability was found in insights-client

A out-of-bounds write flaw was found in the xorg-x11-server

The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being…

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization

A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel

A vulnerability was found in X.Org

An improper link resolution flaw can occur while extracting an archive leading to changing modes, times, access control lists, and flags of a file outside of the archive

An improper link resolution flaw while extracting an archive can lead to changing the access control list (ACL) of the target of the link

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write()

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel

A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file

openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045

Glib: integer overflow in in g_escape_uri_string()

Libssh: libssh: denial of service via automatic certificate authentication loop