[UPDATE] [high] Linux Kernel: Vulnerability allows privilege escalation
A local attacker can exploit a vulnerability in the Linux Kernel to gain root privileges.
Advisories tracked
9,155
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,706
Sources online
24
Last sync
3H AGO
[UPDATE] [medium] Red Hat Enterprise Linux (CPython): Vulnerability allows file manipulation
A remote, authenticated attacker can exploit a vulnerability in Red Hat Enterprise Linux to manipulate files.
[UPDATE] [medium] Python: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Python to conduct a denial of service attack.
[UPDATE] [medium] Red Hat Ansible Automation Platform: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat Ansible Automation Platform to bypass security precautions, disclose information, manipulate data, and cause a denial-of-service condition.
[UPDATE] [medium] Python: Vulnerability allows denial of service
A remote, anonymous attacker can exploit a vulnerability in Python to conduct a denial of service attack.
[UPDATE] [medium] GStreamer: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in GStreamer to conduct a Denial of Service attack, manipulate data, or disclose confidential information.
[UPDATE] [medium] NGINX and NGINX Plus: Multiple vulnerabilities allow denial of service
A remote, anonymous or local attacker can exploit multiple vulnerabilities in NGINX NGINX Plus and NGINX to conduct a denial of service attack.
[UPDATE] [medium] Apache CXF: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in Apache CXF to bypass security measures, conduct XML External Entity attacks, manipulate data, or disclose confidential information.
[UPDATE] [high] Netty: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Netty to bypass security measures, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [high] Golang Go: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Golang Go to conduct an unspecified attack, perform a denial of service, and present false information.
[UPDATE] [medium] Python: Multiple vulnerabilities allow file manipulation and bypassing security measures
A remote, anonymous attacker can exploit multiple vulnerabilities in Python to manipulate files and bypass security measures.
[UPDATE] [medium] TianoCore EDK2: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in TianoCore EDK2 to conduct a denial of service attack.
[UPDATE] [medium] Python: Multiple vulnerabilities allow code execution and DoS
An attacker can exploit multiple vulnerabilities in Python to execute arbitrary code or cause a denial-of-service condition.
[UPDATE] [high] NGINX Open Source and NGINX Plus: Vulnerability allows denial of service and potentially code execution
A remote, anonymous attacker can exploit a vulnerability in NGINX and NGINX Plus to conduct a denial of service attack and potentially execute arbitrary code.
[UPDATE] [high] EDK2 NetworkPkg IP stack implementation: Multiple vulnerabilities
An attacker from the adjacent network or a remote, anonymous attacker can exploit multiple vulnerabilities in the EDK2 NetworkPkg IP stack implementation to execute arbitrary program code, disclose confidential information, and trigger a denial of service condition.
[UPDATE] [medium] Python: Vulnerability allows bypassing security mechanisms
A remote, anonymous attacker can exploit a vulnerability in Python to bypass security mechanisms or achieve other effects.
[UPDATE] [high] Apache CXF: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache CXF to execute arbitrary program code, manipulate data, and disclose confidential information.
[UPDATE] [medium] Golang Go-Module (Net, Image, Crypto): Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in Golang Go to gain elevated privileges, conduct cross-site scripting attacks, bypass security measures, or cause a denial-of-service condition.
[UPDATE] [medium] Red Hat OpenShift Data Foundation: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in Red Hat OpenShift Data Foundation to bypass security measures.
[UPDATE] [medium] Python: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in Python to bypass security measures.
[UPDATE] [medium] Python: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in Python to bypass security measures.
[UPDATE] [high] Unbound: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Unbound to cause a denial of service state, potentially execute code, and cause unspecified impacts.
[UPDATE] [high] Python: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in Python to carry out a Denial of Service attack.
[UPDATE] [high] NGINX Open Source and NGINX Plus: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in NGINX Open Source and NGINX Plus to bypass security measures, execute arbitrary code, manipulate data, disclose confidential information, or cause a denial-of-service condition.
[UPDATE] [high] Python: Vulnerability allows privilege escalation
A local attacker can exploit a vulnerability in Python to elevate their privileges.
[UPDATE] [low] CPython: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in CPython to carry out a Denial of Service attack.
[UPDATE] [high] Python: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in Python to execute arbitrary program code.
[UPDATE] [critical] Python: Vulnerability allows code execution
An attacker can exploit a vulnerability in Python to execute arbitrary program code.
[NEW] [high] Juniper JUNOS and JUNOS Evolved: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Juniper JUNOS, JUNOS Evolved, Juniper EX Series, Juniper MX Series, Juniper QFX Series, and Juniper SRX Series to cause a Denial of Service condition, disclose information, execute code, and trigger undefined behavior.
[UPDATE] [high] Microsoft Malware Protection Engine: Vulnerability allows privilege escalation
A local attacker can exploit a vulnerability in Microsoft Malware Protection Engine and Microsoft Defender to elevate their privileges.
[UPDATE] [critical] Flowise: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Flowise to execute arbitrary code and to disclose information.
[UPDATE] [high] Ruby and Ruby on Rails (erb gem): Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in Ruby and Ruby on Rails to bypass security measures and execute arbitrary code.
[NEW] [high] n8n: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in n8n to escalate privileges, disclose information, manipulate data, perform a Cross-Site Scripting attack, bypass security measures, and execute arbitrary code.
[NEW] [high] rclone: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in rclone to read and write arbitrary files, as well as disclose information and bypass security mechanisms.
[NEW] [high] GitLab: Multiple vulnerabilities
A remote, authenticated attacker can exploit multiple vulnerabilities in GitLab to execute arbitrary code, perform Cross-Site Scripting, manipulate data, or disclose confidential information.
[NEW] [high] FreeRDP: Vulnerability allows code execution
A remote, anonymous attacker can exploit a vulnerability in FreeRDP to execute arbitrary program code.
[NEW] [high] LiteLLM: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in LiteLLM to disclose information, manipulate data, execute code, and bypass security measures.
[NEW] [high] Progress Software MOVEit: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Progress Software MOVEit to bypass security measures, perform a Denial of Service attack, and conduct a Cross-Site Scripting attack.
[UPDATE] [high] Mozilla Firefox: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Mozilla Firefox to conduct unspecified attacks, potentially including code execution, bypassing security measures, disclosing or manipulating data, or causing Denial-of-Service conditions.
[UPDATE] [high] Mozilla Firefox and Thunderbird: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Mozilla Firefox, Mozilla Firefox ESR, and Mozilla Thunderbird to execute arbitrary code, disclose information, bypass security restrictions (e.g., sandbox escape), deceive the user, escalate permissions, or caus…
[NEW] [high] IBM Operational Decision Manager: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM Operational Decision Manager to execute arbitrary program code, escalate privileges, perform a Denial of Service attack, disclose information, manipulate files, and bypass security measures.
[NEW] [medium] MISP: Multiple vulnerabilities allow bypassing security measures
A remote, authenticated attacker can exploit multiple vulnerabilities in MISP to bypass security measures.
[NEW] [medium] MailPit: Multiple vulnerabilities allow Denial of Service
An attacker can exploit multiple vulnerabilities in MailPit to perform a Denial of Service attack.
[NEW] [low] RabbitMQ: Vulnerability allows information disclosure
A remote, authenticated attacker can exploit a vulnerability in RabbitMQ to disclose information.
[NEW] [medium] OpenCTI: Vulnerability allows Denial of Service
A remote, authenticated attacker can exploit a vulnerability in OpenCTI to perform a Denial of Service attack.
[NEW] [high] IBM Security Verify Access: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM Security Verify Access to gain elevated privileges, execute arbitrary code, bypass security measures, manipulate data, disclose sensitive information, and perform other unspecified attacks.
[NEW] [high] Drupal Modules: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Drupal to perform SQL injection attacks, bypass security measures, disclose confidential information, and conduct cross-site scripting attacks.
[NEW] [medium] Wazuh: Vulnerability allows denial of service
A remote, authenticated attacker can exploit a vulnerability in Wazuh to conduct a denial of service attack.
[NEW] [high] Bitwarden: Vulnerability allows bypassing of security measures
A remote, authenticated attacker can exploit a vulnerability in Bitwarden to bypass security measures.
[UPDATE] [medium] Red Hat Enterprise Linux (dracut): Vulnerability allows executing arbitrary code with administrator rights
An attacker from an adjacent network can exploit a vulnerability in Red Hat Enterprise Linux to execute arbitrary code with administrator rights.