Lucene search
+L

21041 matches found

RedHat Linux
RedHat Linux
added 2026/07/21 3:45 p.m.7 views

Important: Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - aom

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

7.6CVSS5.2AI score0.00511EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/21 3:16 p.m.7 views

CVE-2024-5300

An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...

5.6CVSS0.00099EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/07/21 1:0 p.m.8 views

SUSE CVE-2026-64042

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF exports access to BAR resources and, although they are requested at startup time, we need to ensure they really were reserved before exporting. Otherwise, it's...

8.8CVSS5.3AI score0.00154EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.10 views

PT-2026-62160

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Metadata Plugin of the Oracle Enterprise Manager Base Platform allows a low privileged attacker with network...

8.8CVSS7.1AI score0.00402EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.6 views

PT-2026-62162

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Metadata Plugin of the Oracle Enterprise Manager Base Platform allows a low privileged attacker with network...

6.5CVSS7.1AI score0.00212EPSS
SaveExploits0References5
Oracle linux
Oracle linux
added 2026/07/21 12:0 a.m.6 views

389-ds-base security, bug fix, and enhancement update

3.2.0-8 - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-10.2.z - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit...

7.5CVSS5.6AI score0.00815EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.4 views

PT-2026-63055

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows an unauthenticated attacker with network access via HTTP to compromise the system. A successful exploit can lead to a full...

8.1CVSS7.2AI score0.00366EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.7 views

PT-2026-62157

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Enterprise Config Management component allows a low privileged attacker with network access via HTTPS to...

8.8CVSS7.1AI score0.00402EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.7 views

PT-2026-62155

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform. An...

7.3CVSS7.1AI score0.00228EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.9 views

PT-2026-62165

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Security Framework component allows a low privileged attacker with network access via HTTPS to compromise the platform. The attack requires human interaction from a...

3.5CVSS7AI score0.00127EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.8 views

PT-2026-62159

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform Agent Next Gen version 13.5 Oracle Enterprise Manager Base Platform Agent Next Gen version 24.1 Description An issue in the Agent Next Gen component allows an unauthenticated attacker with network access...

9.8CVSS7.1AI score0.00362EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.7 views

PT-2026-62154

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 Description A flaw in the UI Framework component allows a low privileged attacker with network access via HTTPS to compromise the system. This issue can lead to unauthorized access...

9.1CVSS7.1AI score0.00243EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.9 views

PT-2026-62158

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Agent Next Gen component allows a low privileged attacker with network access via HTTPS to compromise the...

8.2CVSS7.1AI score0.0027EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.10 views

PT-2026-62163

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Metadata Plugin of the Oracle Enterprise Manager Base Platform allows an unauthenticated attacker with network...

8.8CVSS7.1AI score0.00285EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.7 views

PT-2026-63307

Name of the Vulnerable Software and Affected Versions Gitea versions 1.26.4 and earlier Description The restore-repo CLI command fails to properly validate the Head.CloneURL field when parsing pull request.yml from a repository dump. The safety check function CheckAndEnsureSafePR is called with a...

6.3CVSS6AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.7 views

PT-2026-62164

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Discovery Framework component allows an unauthenticated attacker with network access via HTTPS to compromise th...

7CVSS7.1AI score0.00216EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/07/21 12:0 a.m.5 views

PT-2026-62156

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform. A low privilege...

4.4CVSS7.1AI score0.00106EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/20 10:55 p.m.10 views

sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

8.8CVSS5.2AI score0.00547EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/20 9:51 p.m.9 views

node-tar: Negative tar entry size causes infinite loop in archive replace

Summary A checksum-valid tar archive with a negative base-256 encoded entry size can make tar.replace loop forever while scanning the existing archive. Applications that update attacker-controlled tar archives can have a worker process pinned indefinitely, causing denial of service. Details The...

8.7CVSS7.3AI score0.00418EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2026/07/20 9:51 p.m.7 views

GHSA-8X88-C5MF-7J5W node-tar: Negative tar entry size causes infinite loop in archive replace

Summary A checksum-valid tar archive with a negative base-256 encoded entry size can make tar.replace loop forever while scanning the existing archive. Applications that update attacker-controlled tar archives can have a worker process pinned indefinitely, causing denial of service. Details The...

8.7CVSS5.5AI score0.00418EPSS
SaveExploits1References5
Rows per page
Query Builder