[NEW] [medium] Apache Tomcat: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache Tomcat to bypass security measures and disclose information.
Advisories tracked
20,853
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,782
Sources online
24
Last sync
2H AGO
[NEW] [medium] Red Hat Enterprise Linux (python-pillow): Multiple vulnerabilities allow denial of service
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux regarding python-pillow to perform a denial of service attack.
[NEW] [high] CPython: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in CPython to conduct a Denial of Service attack.
[NEW] [medium] IBM Langflow Desktop OSS: Vulnerability allows information disclosure
A remote attacker can exploit a vulnerability in IBM Langflow Desktop OSS to disclose information.
[NEW] [medium] GStreamer: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in GStreamer to potentially execute arbitrary code, manipulate data, or trigger a Denial-of-Service condition.
[NEW] [medium] Red Hat Enterprise Linux (libsolv, aardvark-dns): Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to conduct a denial of service attack, manipulate data, or disclose confidential information.
[NEW] [high] IBM Security Verify Access: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM Security Verify Access to gain elevated privileges, execute arbitrary code, bypass security measures, manipulate data, disclose sensitive information, and perform other unspecified attacks.
[NEW] [medium] Golang Go: Multiple vulnerabilities allow information disclosure
An attacker can exploit multiple vulnerabilities in Golang Go to disclose information.
[NEW] [medium] Red Hat Enterprise Linux (freeipmi): Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to conduct a denial of service attack.
[NEW] [medium] OpenSSH: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in OpenSSH to conduct an unspecified attack, perform a denial of service attack, disclose information, manipulate files, and bypass security measures.
[NEW] [high] OpenVPN: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in OpenVPN to execute arbitrary code, manipulate data, or cause a denial-of-service condition.
[NEW] [medium] PHP: Multiple vulnerabilities allow denial of service
A remote, anonymous attacker can exploit multiple vulnerabilities in PHP to conduct a denial of service attack.
[NEW] [medium] Apache HttpComponents Core: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache HttpComponents Core to perform a Denial of Service attack.
[NEW] [high] IBM DataPower Gateway: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM DataPower Gateway to perform a Denial of Service attack, disclose information, and manipulate data.
[UPDATE] [hoch] IBM Power Hardware Management Console: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Power Hardware Management Console ausnutzen, um beliebigen Programmcode auszuführen.
[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution
A remote, anonymous attacker can exploit multiple vulnerabilities in vim to execute arbitrary program code.
[UPDATE] [medium] vim: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in vim to conduct a denial of service attack, disclose information, and execute arbitrary code.
[UPDATE] [medium] ImageMagick: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in ImageMagick to bypass security measures, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [high] IBM WebSphere Application Server and Application Server Liberty: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM WebSphere Application Server Liberty and IBM WebSphere Application Server to manipulate files, conduct a Cross-Site Scripting attack, execute arbitrary code, disclose information, and perform a Denial of Service attack.
[UPDATE] [medium] vim: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in vim to execute arbitrary code and conduct a denial of service attack.
[UPDATE] [medium] OpenSSH: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in OpenSSH to conduct a denial of service attack, bypass security measures, manipulate data, or disclose confidential information.
[UPDATE] [high] Google Cloud Platform (GKE containerd): Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in Google Cloud Platform to execute arbitrary program code, bypass security measures, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [high] ffmpeg: Vulnerability allows code execution and Denial of Service
A remote, anonymous attacker can exploit a vulnerability in ffmpeg to execute arbitrary code and conduct a Denial of Service attack.
[UPDATE] [high] Red Hat Enterprise Linux (openCryptoki, hplip, 389-ds-base): Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to conduct a denial of service attack, disclose confidential information, gain elevated permissions, or execute arbitrary code.
[UPDATE] [medium] vim: Vulnerability allows denial of service
An attacker can exploit a vulnerability in vim to conduct a denial of service attack.
[UPDATE] [medium] Xen: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in Xen to gain elevated privileges, manipulate data, disclose confidential information, or cause a Denial-of-Service condition.
[UPDATE] [high] Golang Go: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Golang Go to conduct an unspecified attack, perform a denial of service, and present false information.
[UPDATE] [low] vim: Vulnerability allows file manipulation
A remote, anonymous attacker can exploit a vulnerability in vim to manipulate files.
[UPDATE] [medium] vim: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in vim to execute code and cause a denial of service condition.
[UPDATE] [medium] Golang Go-Module (Net, Image, Crypto): Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Golang Go to gain elevated privileges, conduct cross-site scripting attacks, bypass security measures, or cause a denial-of-service condition.
[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution
An attacker can exploit multiple vulnerabilities in vim to execute arbitrary program code.
[UPDATE] [high] Red Hat Enterprise Linux (JWCrypto and python-markdown): Multiple vulnerabilities allow denial of service
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to conduct a denial of service attack.
[UPDATE] [medium] vim: Multiple vulnerabilities allow code execution
An attacker can exploit multiple vulnerabilities in vim to execute arbitrary program code.
[UPDATE] [medium] Golang Go: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Golang Go to bypass security measures, manipulate data, conduct cross-site scripting attacks, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [medium] RabbitMQ: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in RabbitMQ to conduct a cross-site scripting attack and to bypass security measures.
[UPDATE] [high] Red Hat Enterprise Linux (freeipmi): Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to cause a denial-of-service condition or achieve memory corruption, potentially allowing the execution of arbitrary code.
[UPDATE] [medium] Linux Kernel: Vulnerability allows bypassing security measures
A local attacker can exploit a vulnerability in the Linux Kernel to bypass security measures.
[UPDATE] [medium] Red Hat Hardened Images RPMs: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat Hardened Images RPMs to bypass security measures, escalate privileges, disclose confidential information, manipulate data, or cause a denial-of-service condition.
[UPDATE] [medium] Prometheus: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Prometheus to conduct a denial of service attack, disclose confidential information, or perform cross-site scripting attacks.
[UPDATE] [high] Red Hat Hardened Images RPMs (jq and pyOpenSSL): Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Hardened Images RPMs to bypass security measures, cause a Denial-of-Service condition, disclose confidential information, or conduct unspecified attacks, including potential code execution.
[UPDATE] [medium] Red Hat Enterprise Linux (go-jose): Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to conduct a denial of service attack.
[UPDATE] [medium] CPython: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Python to bypass security precautions and manipulate data.
[UPDATE] [medium] vim: Vulnerability allows code execution
An attacker can exploit a vulnerability in vim to execute arbitrary program code.
[UPDATE] [high] Golang Go: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Golang Go to cause memory corruption, execute arbitrary code, bypass security measures, trigger a Denial-of-Service condition, or conduct other unspecified attacks.
[UPDATE] [medium] CPython: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in CPython to bypass security measures and manipulate data.
[UPDATE] [medium] ImageMagick: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in ImageMagick to execute arbitrary program code, bypass security measures, manipulate data, disclose sensitive information, cause a denial-of-service condition, or carry out other unspecified attacks.
[UPDATE] [medium] Red Hat Enterprise Linux (pyasn1): Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to conduct a Denial of Service attack.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities allow denial of service
An attacker can exploit multiple vulnerabilities in the Linux Kernel to create a denial-of-service condition or achieve further unspecified effects.
[UPDATE] [low] CPython: Vulnerability allows Denial of Service
A local attacker can exploit a vulnerability in CPython to conduct a Denial of Service attack.
[UPDATE] [hoch] Red Hat Enterprise Linux (SSSD, libsoup): Mehrere Schwachstellen
Ein entfernter authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Administratorrechte zu erlangen oder Sicherheitsmaßnahmen zu umgehen.