CVE-2024-36465

A flaw was found in Zabbix API CApiService.php. This vulnerability allows a low-privilege user with API access to execute arbitrary SQL commands via the groupBy parameter. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produ...

CVE-2023-6800

No description is available for this CVE. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability...

CVE-2025-30177

A flaw was found in the Apache Camel Undertow component. This vulnerability allows an attacker to inject Camel-specific headers via the inbound request, which can alter the behavior of certain Camel components such as camel-bean and camel-exec. This issue occurs due to the custom header filter...

CVE-2025-2953

A flaw was found in PyTorch. This vulnerability allows denial of service via local exploitation. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability t...

CVE-2025-1861

A flaw was found in PHP. This vulnerability allows incorrect URL truncation and redirection to the wrong location via HTTP redirect handling due to a limited location buffer size. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red H...

CVE-2025-1736

A flaw was found in PHP. This vulnerability allows certain headers to be either not sent or misinterpreted due to insufficient validation of the end-of-line characters via user-supplied headers. Mitigation Mitigation for this issue is either not available or the currently available options do not...

CVE-2025-1734

A flaw was found in PHP. This vulnerability allows applications to accept invalid headers via malformed HTTP headers missing a colon :, which may confuse applications into processing them as valid headers. Mitigation Mitigation for this issue is either not available or the currently available...

CVE-2025-1219

A flaw was found in PHP's DOM and SimpleXML extensions. This vulnerability allows incorrect parsing of a redirected HTTP resource via improper content-type header handling. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2025-1860

Data::Entropy for Perl 0.007 and earlier use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2025-27835

A flaw was found in Artifex Ghostscript. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2025-2754

A flaw was found in the Open Asset Import Library Assimp. The Assimp::AC3DImporter::ConvertObjectSection function of the code/AssetLib/AC/ACLoader.cpp file in the AC3D File Handler component is affected. This attack can be launched remotely, and manipulation of the argument can lead to a heap-bas...

CVE-2025-2756

A flaw was found in the Open Asset Import Library Assimp. This affects the Assimp::AC3DImporter::ConvertObjectSection function of the code/AssetLib/AC/ACLoader.cpp file in the AC3D File Handler component. The manipulation of the tmp argument can lead to a heap-based buffer overflow. It is possibl...

CVE-2025-2753

A flaw was found in the Open Asset Import Library Assimp. The SceneCombiner::MergeScenes function of the code/AssetLib/LWS/LWSLoader.cpp file in the LWS File Handler component is affected. It is possible to launch the attack remotely, and manipulation can lead to out-of-bounds read. Mitigation...

CVE-2025-2724

A flaw was found in the libgsf package, affecting the sortingkeycopy function. It is possible to launch the attack on the local host, and manipulation of the Name argument can lead to out-of-bounds read. Mitigation Mitigation for this issue is either not available or the currently available optio...

CVE-2025-2723

A flaw was found in the GNOME libgsf package, affecting the gsfpropertysettingscollec function. Manipulation of the nallocedparams argument can lead to a heap-based buffer overflow. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red...

CVE-2024-13903

A flaw was found in QuickJS-ng. This vulnerability allows a stack-based buffer overflow via manipulation of the JSGetRuntime function in the quickjs.c file of the qjs component. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2025-2584

A flaw was found in WebAssembly wabt. This vulnerability allows a heap-based buffer overflow via a manipulated function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2025-0315

A flaw was found in Ollama. This vulnerability allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a denial of service DoS attack via specially crafted GGUF model files...

CVE-2025-0313

A flaw was found in Ollama. This vulnerability allows a malicious user to cause a denial of service DoS attack via improper validation of array index bounds in the GGUF model handling code, which can be exploited remotely over a network. Mitigation Mitigation for this issue is either not availabl...

CVE-2024-7598

A flaw was found in Kubernetes. This vulnerability can allow a malicious or compromised pod to bypass network restrictions via the deletion of network policies before pod termination during namespace deletion. Mitigation Mitigation for this issue is either not available or the currently available...