CVE-2025-5417 Rhdh: red hat developer hub user permissions

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

CVE-2025-5417

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

Linux Distros Unpatched Vulnerability : CVE-2021-20179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again,...

ROS-20250819-08

A vulnerability in the Transfer-Encoding and Content-Length headers of the Netty networking software tool is related to a flaw in the interpretation of HTTP requests. a flaw in the interpretation of HTTP requests. Exploitation of the vulnerability could allow an attacker, acting remotely, to impa...

Linux Distros Unpatched Vulnerability : CVE-2018-5709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in MIT Kerberos 5 aka krb5 through 1.16. There is a variable dbentry-nkeydata in kadmin/dbutil/dump.c that can store 16-bit data but...

Linux Distros Unpatched Vulnerability : CVE-2021-32027

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values,...

CVE-2025-5417: Incorrect Privilege Assignment

An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container...

Qualcomm Memory Use After Release

The vulnerability of embedded Qualcomm software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Computer Vision Data Compromise

The vulnerability of the Computer Vision component of Qualcomm’s embedded software systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protect...

Qualcomm Camera Component Data Compromise

The vulnerability of the Camera component in the microprogramming software of Qualcomm embedded chips relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the...

Core Services Embedded Qualcomm Data Compromise

The vulnerability of Core Services components in embedded Qualcomm software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

tarfile module CPython Data Compromise

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Draytek Vigor Access Point Web Interface Credential Encryption Issue

The vulnerability of the web interface of Draytek Vigor Access Point software lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CPython Path Traversal

The vulnerability of the CPython interpreter is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

Linux Distros Unpatched Vulnerability : CVE-2020-25693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in loadpnm can be triggered by a specially crafted input...

Linux Distros Unpatched Vulnerability : CVE-2020-25686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a...

Linux Distros Unpatched Vulnerability : CVE-2021-3421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package ...

Linux Distros Unpatched Vulnerability : CVE-2020-25685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:replyquery, which is the forwarded que...

Linux Distros Unpatched Vulnerability : CVE-2020-25684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:replyquery if the reply destinatio...

CVE-2024-41986

A vulnerability has been identified in SmartClient modules Opcenter QL Home SC All versions = V13.2 = V13.2 = V13.2 V2506. The affected application support insecure TLS 1.0 and 1.1 protocol. An attacker could achieve a man-in-the-middle attack and compromise confidentiality and integrity of data...