[UPDATE] [medium] libTIFF: Vulnerability allows code execution and DoS
A remote, anonymous attacker can exploit a vulnerability in libTIFF to potentially execute arbitrary code or trigger a Denial-of-Service condition.
Advisories tracked
9,176
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,706
Sources online
24
Last sync
1H AGO
[UPDATE] [medium] Red Hat Virtualization: Multiple vulnerabilities allow Denial of Service
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Virtualization to conduct a Denial of Service attack.
[UPDATE] [medium] Red Hat Enterprise Linux: Multiple vulnerabilities allow unspecified attack
A remote, authenticated attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to conduct an unspecified attack.
[UPDATE] [high] jq: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in jq to conduct a Denial of Service attack, manipulate data, or achieve other unspecified impacts.
[UPDATE] [medium] Red Hat Enterprise Linux (glib): Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to execute arbitrary program code or cause a Denial-of-Service condition.
[UPDATE] [medium] libTIFF: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in libTIFF to conduct a Denial of Service attack.
[UPDATE] [high] Mozilla Firefox: Vulnerability allows code execution
An attacker can exploit a vulnerability in Mozilla Firefox to cause a memory corruption or potentially execute arbitrary code.
[UPDATE] [medium] jq: Vulnerability allows bypassing security measures
A local attacker can exploit a vulnerability in jq to bypass security measures.
[UPDATE] [medium] avahi: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in avahi to conduct a denial of service attack.
[UPDATE] [high] PowerDNS: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in PowerDNS to disclose information, bypass security measures, cause a denial of service, and potentially execute code.
[UPDATE] [medium] jq: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in jq to conduct a denial of service attack.
[UPDATE] [medium] FreeRDP: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in FreeRDP to potentially execute arbitrary code, cause a denial-of-service condition, manipulate data, disclose confidential information, or conduct other unspecified attacks.
[UPDATE] [medium] ImageMagick: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in ImageMagick to bypass security measures, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [medium] Red Hat Enterprise Linux (keylime): Vulnerability allows bypassing security precautions
A local attacker can exploit a vulnerability in Red Hat Enterprise Linux (keylime) to bypass security precautions.
[UPDATE] [medium] nmap: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in nmap to conduct a denial of service attack.
[UPDATE] [medium] jq: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in jq to conduct a denial of service attack.
[UPDATE] [high] Red Hat OpenShift: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat OpenShift to execute arbitrary program code and disclose information.
[UPDATE] [high] Microsoft Edge (Chromium-based): Vulnerability allows code execution
A remote, authenticated attacker can exploit a vulnerability in Microsoft Edge to execute arbitrary program code.
[UPDATE] [critical] Kemp LoadMaster: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Kemp LoadMaster to bypass security measures, manipulate data, or execute arbitrary code.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct a denial of service attack or perform other unspecified attacks.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities allow denial of service
A remote attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct a denial of service attack or cause unspecified effects.
[NEW] [medium] FreeBSD Project FreeBSD OS: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in FreeBSD Project FreeBSD OS to escalate their privileges, disclose information, manipulate files, conduct a denial of service attack, and execute arbitrary code.
[NEW] [medium] Microsoft GitHub Enterprise Server: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in Microsoft GitHub Enterprise Server to conduct a cross-site scripting attack, bypass security measures, and disclose confidential information.
[UPDATE] [medium] libvirt: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in libvirt to conduct a denial of service attack.
[NEW] [high] UltraVNC: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in UltraVNC to execute arbitrary code, disclose confidential information, manipulate data, and cause a denial of service.
[NEW] [high] LiteLLM: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in LiteLLM to bypass security measures, execute arbitrary code, and manipulate files.
[NEW] [medium] Dell PowerScale OneFS: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in Dell PowerScale OneFS to disclose information or escalate privileges.
[NEW] [low] IBM InfoSphere Information Server: Vulnerability allows information disclosure
An attacker from an adjacent network can exploit a vulnerability in IBM InfoSphere Information Server to disclose information.
[NEW] [high] IBM WebSphere Application Server Liberty: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM WebSphere Application Server Liberty to perform an unspecified attack and to bypass security measures.
[NEW] [medium] hostapd: Vulnerability allows denial of service
An attacker from an adjacent network can exploit a vulnerability in hostapd to conduct a denial of service attack.
[NEW] [medium] win.rar WinRAR: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in win.rar WinRAR to execute arbitrary program code.