Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS.EPSS 1.4%Feb 15, 2023
- High7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform.EPSS 0.4%Jan 5, 2023
- Medium5.5An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c.EPSS 0.4%Nov 8, 2022
- Medium5.5An out-of-bounds memory read flaw was found in the Linux kernel's BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map.EPSS 0.4%Sep 9, 2022
- High7.5A flaw was found in python.EPSS 4.5%Sep 9, 2022
- Medium5.5A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ.EPSS 0.5%Aug 31, 2022
- High8.8An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.EPSS 5.1%Aug 31, 2022
- Medium5.5A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component.EPSS 0.3%Aug 29, 2022
- Medium5.5A flaw was found in the Linux kernel.EPSS 0.3%Aug 26, 2022
- Medium6.5A NULL pointer dereference flaw was found in GnuTLS.EPSS 1.7%Aug 24, 2022
- Medium5.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.EPSS 3.2%Aug 24, 2022
- Medium5.5A flaw was found in systemd.EPSS 1.7%Aug 23, 2022
- High7.5A vulnerability found in gnutls.EPSS 2.0%Aug 1, 2022
- Medium5.5A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat…EPSS 1.0%Jun 30, 2022
- Medium5.5A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c.EPSS 0.3%Jun 30, 2022
- Medium6.3An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem.EPSS 0.3%Jun 2, 2022
- High8.8WebKitGTK Memory Corruption VulnerabilityKEVEPSS 1.6%May 23, 2022
- High7.8An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5.EPSS 1.4%Apr 14, 2022
- Medium6.5There's a flaw in urllib's AbstractBasicAuthHandler class.EPSS 4.8%Mar 10, 2022
- High7.8Linux Kernel Privilege Escalation VulnerabilityKEVEPSS 92.8%Mar 10, 2022
- High7.5A flaw was found in python.EPSS 13.2%Mar 4, 2022
- High7.8Linux Kernel Improper Authentication VulnerabilityKEVEPSS 5.5%Mar 3, 2022
- High7.8Red Hat Polkit Incorrect Authorization VulnerabilityKEVEPSS 23.7%Feb 16, 2022
- High7.8Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityKEVEPSS 94.9%Jan 28, 2022
- Critical9.0Apache HTTP Server-Side Request Forgery (SSRF)KEVEPSS 100.0%Sep 16, 2021