Skip to content
Threat Feed

CPE

Cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:Vmware_vsphere:*:*

10 briefs RSS
medium advisory

Multiple Vulnerabilities in Red Hat Quay and Enterprise Linux

Red Hat Quay and Red Hat Enterprise Linux are affected by vulnerabilities in the pypdf and urllib3 libraries, alongside URI handling flaws, allowing remote unauthenticated attackers to perform Denial of Service or security bypasses.

Quay +1 vulnerability red-hat linux denial-of-service
3c
high advisory

Multiple Vulnerabilities in MariaDB Connector/Node.js

MariaDB Connector/Node.js is vulnerable to multiple security flaws, including SQL injection, information disclosure, data manipulation, and denial-of-service, allowing remote unauthenticated attackers to compromise data.

Connector/Node.js vulnerability database nodejs
2t 2c
low advisory

Multiple Vulnerabilities in Red Hat Enterprise Linux Components

Multiple vulnerabilities in corosync, libevent, and libsoup within Red Hat Enterprise Linux could allow attackers to execute arbitrary code, bypass security controls, disclose data, or cause denial-of-service.

Enterprise Linux +1 vulnerability rhel linux
1t 1c updated
low advisory

Multiple Vulnerabilities in Oracle Hyperion

Oracle Hyperion is affected by multiple security vulnerabilities (CVE-2024-21054, CVE-2024-21055) that allow remote attackers to compromise system confidentiality, integrity, and availability.

Hyperion vulnerability enterprise-application
2c
high advisory

CVE-2022-22978 Authorization Bypass in Spring Security

An authorization bypass vulnerability in Spring Security allows unauthenticated attackers to access restricted endpoints by injecting URL-encoded newline or carriage return characters into request paths protected by RegexRequestMatcher.

Spring Security vulnerability web-application authentication-bypass
1r 1t 1c
high advisory

Multiple Vulnerabilities in VMware Tanzu Spring Security

Multiple vulnerabilities in VMware Tanzu Spring Security, tracked as CVE-2024-22259 and CVE-2024-22262, allow remote attackers to perform file manipulation, information disclosure, cross-site scripting (XSS), and security control bypass.

Tanzu Spring Security vulnerability web-security
2c
medium advisory

Remote Code Execution Vulnerability in zlib

A memory corruption vulnerability in the zlib library allows a remote, unauthenticated attacker to execute arbitrary code or trigger a denial of service.

zlib
1t 1c
low advisory

Multiple Vulnerabilities in Oracle Hyperion

Oracle has disclosed a series of 25 vulnerabilities affecting Hyperion, enabling remote, anonymous, or authenticated attackers to compromise system confidentiality, integrity, and availability.

Hyperion vulnerability enterprise-software patch-management
2c
medium advisory

Multiple Vulnerabilities in Red Hat Enterprise Linux glib2

Multiple vulnerabilities in the glib2 library for Red Hat Enterprise Linux, identified as CVE-2024-52532 and CVE-2024-52533, allow remote attackers to perform denial-of-service attacks or achieve information disclosure.

Enterprise Linux vulnerability linux rhel glib2 privilege-escalation
1t 2c updated
medium advisory

Denial of Service Vulnerability in GNU C Library

A local attacker can exploit a vulnerability in the GNU C Library (glibc) to cause application crashes or service instability, resulting in a Denial of Service.

PoC GNU C Library +2 denial-of-service linux vulnerability
1t 1c updated