3409 matches found
GHSA-MRWW-27VC-GGHV vulnerabilities
Vulnerabilities for packages: kube-bench, kine, kots, step, step-ca, src, trillian, ferretdb, caddy, k3s, temporal-server, argo-workflows, spicedb, amass...
SUSE CVE-2024-25081
Splinefont in FontForge through 20230101 allows command injection via crafted filenames...
SUSE CVE-2022-48624
closealtfile in filename.c in less before 606 omits shellquote calls for LESSCLOSE...
SUSE CVE-2024-20925
unknown...
GHSA-XR7R-F8XQ-VFVV vulnerabilities
Vulnerabilities for packages: ctop, nerdctl, trivy, docker, grype, syft, k9s, kots, skopeo, zot, cadvisor, zarf, buildkitd, k3s, kubescape, wolfictl, kaniko, newrelic-infrastructure-agent, runc, skaffold, kubernetes, podman, k3d...
Moderate: Red Hat Security Advisory: python3.9 security update
An update for python3.9 is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Moderate: python3.9 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
SUSE CVE-2023-35057
An integer overflow vulnerability exists in the LXT2 lxt2rdtrace value elements allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability...
CVE-2022-3328
Race condition in snap-confine's mustmkdirandopenwithperms...
CVE-2023-43813
GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, the saved search feature can be used to perform a SQL injection. Version 10.0.11 contains a patch for the issue...
CVE-2023-46219 vulnerabilities
Vulnerabilities for packages: curl...
IBM AIX Security Vulnerabilities
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. A security vulnerability exists in IBM AIX that originated from a vulnerability that could allow an unprivileged local user to execute arbitrary commands using...
curl: cookie injection with none file
A flaw was found in the Curl package. This flaw allows an attacker to insert cookies into a running program using libcurl if the specific series of conditions are met...
CVE-2023-33202 vulnerabilities
Vulnerabilities for packages: gradle...
c-ares: buffer overflow in config_sortlist() due to missing string length check
A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...
mariadb: server crash in JOIN_CACHE::free or in copy_fields
MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...
insights-client: unsafe handling of temporary files and directories
A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unprivileged local...
CVE-2023-3676
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes...