CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2527 matches found

Tenable Nessus•added 2025/10/06 12:0 a.m.•4 views

RHEL 8 : firefox (RHSA-2025:17371)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:17371 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

8.8CVSS7.2AI score0.00681EPSS

SaveExploits0References16

Rockylinux•added 2025/10/04 12:11 a.m.•19 views

microcode_ctl bug fix and enhancement update

An update is available for microcodectl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The microcodectl packages provide microcode updates for Intel and AMD...

6.8CVSS7.3AI score0.00371EPSS

SaveExploits0

Rockylinux•added 2025/10/04 12:11 a.m.•11 views

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...

9.1CVSS6.9AI score0.00778EPSS

SaveExploits0

OSV•added 2025/10/04 12:11 a.m.•12 views

RLSA-2025:12831 Moderate: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the security issues, including the impact, a CVSS score...

5.4CVSS7.6AI score0.00778EPSS

SaveExploits0References2

Tenable Nessus•added 2025/10/04 12:0 a.m.•10 views

RockyLinux 10 : opentelemetry-collector (RLSA-2025:7479)

The remote RockyLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RLSA-2025:7479 advisory. go-jose: Go JOSE's Parsing Vulnerable to Denial of Service CVE-2025-27144 golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in...

8.7CVSS6.7AI score0.00804EPSS

SaveExploits0References9

OSV•added 2025/10/03 8:15 p.m.•7 views

AZL-68426 CVE-2025-49844 affecting package valkey for versions less than 8.0.6-1

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all...

9.9CVSS7.1AI score0.86767EPSS

SaveExploits14References1