Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: redhat'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2025-6021 7.5 A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input. 2026-10-12 21:17:06
CVE-2025-5914 7.8 A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free 2026-10-12 20:17:06
CVE-2025-7424 7.5 A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt m 2026-10-12 18:17:19
CVE-2026-55653 4.3 A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when 2026-10-12 08:17:23
CVE-2026-4878 6.7 A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability upd 2026-10-09 23:16:54
CVE-2011-3389 4.3 The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man 2026-10-09 20:17:02
CVE-2015-5477 7.8 named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. 2026-10-09 19:12:37
CVE-2015-3306 10.0 The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. 2026-10-09 16:17:18
CVE-2022-2946 7.8 Use After Free in GitHub repository vim/vim prior to 9.0.0246. 2026-10-09 14:17:09
CVE-2022-2849 7.8 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0220. 2026-10-09 14:17:08
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/904
Zapisa po stranici: