Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- cortexproject cortexAlertmanager can expose local files content via specially crafted configCVE-2022-23536Fix available6.5 Medium
- containerdcontainerd CRI stream server: Host memory exhaustion through terminal resize goroutine leakCVE-2022-23471Fix available5.7 Medium
- linuxfoundation mirage firewallqubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users...CVE-2022-46770Public exploitFix availableEPSS 23.3%7.5 High
- linuxfoundation opendaylightA SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm...CVE-2022-459327.5 High
- linuxfoundation opendaylightA SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm...CVE-2022-459317.5 High
- linuxfoundation opendaylightA SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm...CVE-2022-459307.5 High
- linuxfoundation pytorchPyTorch vulnerable to arbitrary code executionCVE-2022-45907Fix available9.8 Critical
- knative func, linuxfoundation knative func +1 moreCredential exposure when running third-party builders in knative/funcCVE-2022-419396.1 Medium
- kubevelaSSRF vulnerability in KubeVela VelaUX APIServerCVE-2022-39383Fix available4.9 Medium
- linux foundation software for open networking in the cloud (sonic), linuxfoundation software for open networking in the cloud +1 moreBuffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)CVE-2022-0324Public exploit8.1 High
- google android, linuxfoundation yocto, mediatek, inc. mt6855, mt6879, mt6895, mt6983, mt8185, mt8321, mt8385, mt8518, mt8666, mt8675, mt8765, mt8768, mt8786, mt8788, mt8789 +2 moreIn cpu dvfs, there is a possible out of bounds write due to a missing bounds check. This could...CVE-2022-325926.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt7663, mt7668, mt7902, mt7921, mt8167s, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8512a, mt8518, mt8532, mt8667, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789 +2 moreIn wlan, there is a possible use after free due to an incorrect status check. This could lead to...CVE-2022-325906.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt7663, mt7668, mt7902, mt7921, mt8167s, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8512a, mt8518, mt8532, mt8667, mt8766, mt8768, mt8786, mt8788, mt8789 +2 moreIn Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release....CVE-2022-325897.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6853, mt6855, mt6873, mt6875, mt6879, mt6883, mt6885, mt6889, mt6895, mt6983, mt7663, mt7902, mt7921, mt8167s, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8512a, mt8518, mt8532, mt8667, mt8695, mt8696, mt8766, mt8768, mt8786, mt8788, mt8789 +2 moreIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2022-264756.7 Medium
- dexidp dexOAuth authorization code exposure in DexCVE-2022-39222Fix available9.3 Critical
- linuxfoundation dapr dashboardDapr Dashboard vulnerable to Incorrect Access ControlCVE-2022-388177.5 High
- hyperledger besuIncorrect Conversion between Numeric Types in Besu Ethereum ClientCVE-2022-36025Fix available9.1 Critical
- harborHarbor fails to validate the user permissions when updating a robot accountCVE-2022-31667Fix available6.4 Medium
- harborHarbor fails to validate the user permissions when updating tag immutability policiesCVE-2022-31669Fix available6.4 Medium
- harborHarbor fails to validate user permissions while Viewing, updating and deleting Webhook policiesCVE-2022-31666Fix available7.7 High
- harborHarbor fails to validate the user permissions when updating tag retention policiesCVE-2022-31670Fix available7.7 High
- harborHarbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat execution logsCVE-2022-31671Fix available7.4 High
- hyperledger indy-nodeHyperledger Indy DOS vulnerabilityCVE-2022-31006Fix available7.5 High
- hyperledger indy-nodeRemote code execution in Indy's NODE_UPGRADE transactionCVE-2022-31020Fix available8.8 High
- linuxfoundation loopback-connector-postgresqlloopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` FilterCVE-2022-35942Fix available9.3 Critical
- ceph, fedoraproject fedora, redhat ceph storage +2 moreA flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner...CVE-2022-0670Fix available9.1 Critical
- linuxfoundation rocket chip generatorRocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain...CVE-2022-346329.1 Critical
- argoproj argo cd, argo-cd +1 moreArgo CD's certificate verification is skipped for connections to OIDC providersCVE-2022-31105Fix available8.3 High
- kubeedgeKubeEdge Websocket Client in package Viaduct: DoS from large response messageCVE-2022-31080Fix available4.4 Medium
- kubeedgeKubeEdge Cloud Stream and Edge Stream DoS from large stream messageCVE-2022-31079Fix available4.4 Medium
- kubeedgeKubeEdge CloudCore Router memory exhaustionCVE-2022-31078Fix available4.4 Medium
- kubeedgeKubeEdge DoS when signing the CSR from EdgeCoreCVE-2022-31075Fix available4.9 Medium
- kubeedgeKubeEdge Cloud AdmissionController component DoSCVE-2022-31074Fix available4.5 Medium
- kubeedgeKubeEdge Edge ServiceBus module DoSCVE-2022-31073Fix available6.5 Medium
- kubeedgeMalicious Message can crash CloudCore in KubeEdgeCVE-2022-31076Fix available4.2 Medium
- kubeedgeMalicious response from KubeEdge can crash CSI Driver controller serverCVE-2022-31077Fix available4.0 Medium
- containerd, debian linux, fedoraproject fedora +2 morecontainerd CRI plugin: Host memory exhaustion through ExecSyncCVE-2022-31030Fix available5.5 Medium
- linuxfoundation runc, fedoraproject fedora +1 moreIncorrect Default Permissions in runcCVE-2022-29162Fix available5.9 Medium
- containerd imgcrypt, fedoraproject fedora +1 moreIncorrect Authorization in imgcryptCVE-2022-24778Fix available7.5 High
- grpc grpc-swift, linuxfoundation grpc swift +1 moreDenial of Service via reachable assertion in grpc-swiftCVE-2022-24777Fix available7.5 High
- debian linux, moby, fedoraproject fedora +1 more +3 moreDefault inheritable capabilities for linux container should be emptyCVE-2022-24769Fix available5.9 Medium
- linuxfoundation nats-server, nats streaming server +1 moreArbitrary file write in nats-serverCVE-2022-26652Fix available6.5 Medium
- containerd, debian linux, fedoraproject fedora +2 moreInsecure handling of image volumes in containerd CRI pluginCVE-2022-23648Public exploitFix availableEPSS 27.4%7.5 High
- linuxfoundation harborUnauthenticated users can exploit an enumeration vulnerability in Harbor (CVE-2019-19030)CVE-2019-19030Public exploitFix available5.3 Medium
- linuxfoundation nats-server, nats streaming server +1 moreIncorrect Authorization in NATS nats-serverCVE-2022-24450Fix available8.8 High
- containerd, fedoraproject fedora +1 moreImproper Preservation of Permissions in containerdCVE-2021-43816Fix available8.0 High
- linuxfoundation spinnakerImproper Access Control in spinnakerCVE-2021-4383210.0 Critical
- linuxfoundation spinnakerPath Traversal in spinnakerCVE-2021-391436.6 Medium
- linuxfoundation dojo, debian linux, oracle communications policy management +2 more +4 morePrototype PollutionCVE-2021-23450Fix availableEPSS 30.4%7.5 High
- linuxfoundation longhornUnauthorized data access from replicas through vulnerable instance manager podsCVE-2021-367808.1 High
- Show moreLoading…