CVE Browser

Gnutls: gnutls: denial of service via dtls packet reordering vulnerability

Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication

Glib: integer overflow in in g_escape_uri_string()

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Yelp: arbitrary file read

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

MongoDB Shell may be susceptible to local privilege escalation in Windows

MongoDB Compass may be susceptible to local privilege escalation in Windows

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

Buildah: buildah allows arbitrary directory mount

Openssh: regresshion - race condition in ssh allows rce/dos

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference

net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

Iperf3: possible denial of service

Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation

Jwcrypto: denail of service via specifically crafted jwe

389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)