CVE Browser

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue

Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr uncompressed scanline decoder

Libsoup: soupserver: http/1 request smuggling via undrained expect: 100-continue body

Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

Libsoup: libsoup: heap buffer overflow during websocket client-frame masking

Libsoup: libsoup: heap buffer overflow during websocket receive-buffer growth

Libsoup: libsoup: heap buffer overflow via uninitialized length in data-uri base64 decoding

Libsoup: libsoup: heap buffer overflow during websocket message reassembly

Libsoup: libsoup: heap buffer overflow from websocket pong signal type confusion

Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages

Flatpak: flatpak: sandboxed app can signal unsandboxed processes in the same process group

Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

Flatpak: flatpak: denial of service via unsanitized keys in exported desktop entry / d-bus service files

Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path

Flatpak: flatpak: world-readable oci authentication token in system-helper cache path

Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following

Flatpak: flatpak: extension metadata path traversal file existence oracle

Flatpak: flatpak: flatpak-system-helper cross-user cancelpull orphans another user's ongoing pull

Flatpak: flatpak: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes

Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systems

Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks