Skip to contentLinuxfoundation vulnerabilities
Products
Show 5 moreShow less
Newest
- google android, linux kernel, linuxfoundation iot-yocto +2 more +4 moreIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2023-207166.7 Medium
- google android, linux kernel, linuxfoundation iot-yocto +2 more +4 moreIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2023-207156.7 Medium
- google android, linux kernel, linuxfoundation iot-yocto +2 more +4 moreIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead...CVE-2023-207126.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible memory corruption due to type confusion. This could lead to local...CVE-2023-207474.4 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible out of bounds write due to improper locking. This could lead to local...CVE-2023-207466.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible out of bounds write due to improper locking. This could lead to local...CVE-2023-207456.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible use after free due to a logic error. This could lead to local...CVE-2023-207446.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible out of bounds write due to improper locking. This could lead to local...CVE-2023-207436.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible memory corruption due to a logic error. This could lead to local...CVE-2023-207406.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-207386.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible use after free due to improper locking. This could lead to local...CVE-2023-207376.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible out of bounds write due to a race condition. This could lead to local...CVE-2023-207366.4 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-207356.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to...CVE-2023-207346.7 Medium
- google android, linuxfoundation iot-yocto, yocto +1 more +3 moreIn vcu, there is a possible use after free due to improper locking. This could lead to local...CVE-2023-207336.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt7663, mt7668, mt7902, mt7921, mt8167, mt8167s, mt8173, mt8175, mt8195, mt8362a, mt8365, mt8385, mt8518, mt8532, mt8666, mt8695, mt8781, mt8788 +2 moreIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2023-207326.7 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6835, mt6853, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt7663, mt7668, mt7902, mt7921, mt8167, mt8167s, mt8173, mt8175, mt8195, mt8362a, mt8365, mt8385, mt8518, mt8532, mt8666, mt8695, mt8781, mt8788 +2 moreIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2023-207314.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6985, mt7902, mt7921, mt8365, mt8518, mt8532 +2 moreIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2023-207304.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6985, mt7902, mt7921, mt8365, mt8518, mt8532 +2 moreIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2023-207294.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6781, mt6789, mt6833, mt6835, mt6855, mt6877, mt6879, mt6886, mt6895, mt6983, mt6985, mt7663, mt7668, mt7902, mt7921, mt8167s, mt8168, mt8175, mt8185, mt8195, mt8362a, mt8365, mt8385, mt8395, mt8518, mt8532, mt8673, mt8675, mt8695, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +2 moreIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2023-207284.4 Medium
- google android, linuxfoundation yocto, mediatek, inc. mt6789, mt6835, mt6855, mt6879, mt6886, mt6895, mt6983, mt6985, mt8168, mt8365, mt8695, mt8766, mt8768, mt8781, mt8786, mt8789, mt8791t, mt8797 +2 moreIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2023-207274.4 Medium
- lima-vm limaIn Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing fileCVE-2023-32684Fix available2.7 Low
- linuxfoundation rekormalformed proposed intoto v0.0.2 entries can cause a panic in RekorCVE-2023-33199Fix available5.3 Medium
- linuxfoundation cups-filters, debian linux, fedoraproject fedora +2 moreCommand injection in cups-filtersCVE-2023-24805Fix available8.8 High
- linuxfoundation vitessVitess VTAdmin users that can create shards can deny access to other functionsCVE-2023-29195Fix available4.1 Medium
- fluid-cloudnative fluidOn a compromised node, the fluid-csi service account can be used to modify node specsCVE-2023-30840Fix available5.8 Medium
- linuxfoundation rekorRekor's compressed archives can result in OOM conditionsCVE-2023-30551Fix available7.5 High
- google android, linuxfoundation yocto, mediatek, inc. mt2731, mt2735, mt2737, mt6580, mt6739, mt6761, mt6762, mt6765, mt6767, mt6768, mt6769, mt6771, mt6779, mt6781, mt6783, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6880, mt6883, mt6885, mt6886, mt6889, mt6890, mt6891, mt6893, mt6895, mt6896, mt6980, mt6980d, mt6983, mt6985, mt6990, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8673, mt8675, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +2 more +4 moreIn mnld, there is a possible leak of GPS location due to a missing permission check. This could...CVE-2023-20726Fix available3.3 Low
- linuxfoundation baremetal operator, metal3-io baremetal-operator +1 moreIronic and ironic-inspector deployed within Baremetal Operator may expose as ConfigMapsCVE-2023-30841Fix available6.0 Medium
- linuxfoundation open cluster managementA flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes...CVE-2023-22506.7 Medium
- linuxfoundation kubewarden-controller, suse kubewarden +1 morekubewarden: Excessive permissions for kubewarden-controller-manager-cluster-roleCVE-2023-226458.0 High
- linuxfoundation openfeature, open-feature open-feature-operator +1 moreOpenFeature Operator vulnerable to Cluster-level Privilege EscalationCVE-2023-29018Fix available8.1 High
- linuxfoundation cubefsCubeFS allows Kubernetes cluster-level privilege escalationCVE-2023-305126.5 Medium
- linuxfoundation vitessvitess allows users to create keyspaces that can deny access to already existing keyspacesCVE-2023-29194Fix available4.1 Medium
- google android, linux kernel, linuxfoundation yocto +36 more +38 moreIn wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to...CVE-2023-206774.4 Medium
- linuxfoundation runcrootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runcCVE-2023-25809Fix available5.0 Medium
- linuxfoundation runcAppArmor bypass with symlinked /proc in runcCVE-2023-28642Fix available6.1 Medium
- linuxfoundation argo-cdArgo CD authenticated but unauthorized users may enumerate Application names via the APICVE-2022-41354Fix available4.3 Medium
- debian linux, linuxfoundation runc, redhat enterprise linux +1 more +3 moreOpencontainers runc Incorrect Authorization vulnerabilityCVE-2023-27561Fix available7.0 High
- linuxfoundation zoweImperative Local Command Injection allows Activity MaskingCVE-2021-4326Fix available3.3 Low
- linuxfoundation modular open smart networkPrivilege escalation in MOSNCVE-2021-32163Fix available9.8 Critical
- containerdcontainerd supplementary groups are not set up properlyCVE-2023-25173Fix available5.3 Medium
- containerdcontainerd OCI image importer memory exhaustionCVE-2023-25153Fix available6.2 Medium
- backstage, linuxfoundation backstage catalog-model, backstage core-components +1 more +3 moreBackstage has XSS Vulnerability in Software CatalogCVE-2023-25571Fix available6.8 Medium
- open-telemetry opentelemetry-go-contrib, linuxfoundation opentelemetry-go contrib +1 moreDoS vulnerability for high cardinality metrics in opentelemetry-go-contribCVE-2023-25151Fix available7.5 High
- linuxfoundation onnxDirectory Traversal in onnxCVE-2022-25882Fix available7.5 High
- linuxfoundation zowe api mediation layer, open mainframe project zowe +1 moreIt is possible to manipulate the JWT token without the knowledge of the JWT secret and...CVE-2021-43145.3 Medium
- linuxfoundation harborAn access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private...CVE-2022-46463Public exploitFix availableDisputed7.5 High
- linuxfoundation fossologyfossology cross site scriptingCVE-2022-48752.4 Low
- linuxfoundation spinnakerSpinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer buildsCVE-2022-235064.3 Medium
- Show moreLoading…