Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Saved searches 0
Keep up to eight named searches. Saved in this browser. Filters are also shareable in the page address.
Threads
Related changes across sources- Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Binutils: binutils: denial of service via crafted elf file Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Pppd: pppd: buffer overflow in peap response handling leads to data corruption or denial of service. Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libxml2: libxml2: null pointer dereference parsing nextcatalog without catalog attribute Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path traversal in deployment name Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Keycloak-services: keycloak-services: token refresh continues issuing tokens for disabled audience clients Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Keycloak-services: keycloak-services: delegated admin with manage-users can escalate to realm-admin via group membership Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Keycloak-services: keycloak-services: admin credential delete bypasses denied reset-password permission Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows) Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- accel/rocket: search every core slot when looking up a scheduler Affected-version evidence changed2 linked entries across history · in Security Follow evidence and connection reasons
- Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 10.3.2 until 11.4.9, 12.6.2, and 13.1.1, Highcharts accepts an SVG anchor xlink:href attribute without applying the allowed-scheme check used for href and src. An attacker wh…6 linked entries across history · in Security Follow evidence and connection reasons
- Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute` Advisory content revised: Highcharts JS is a JavaScript charting library based on SVG. From 2.0.0 until 3.2.0, Highcharts Grid Pro input renderers copy the cells.renderer.attributes and cells.editMode.renderer.attributes maps to input or select elements with raw set…6 linked entries across history · in Security Follow evidence and connection reasons