Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

redhat enterprise linux for scientific computing 7.0 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3

CVE-2024-0408

A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access t...
Tigervnc TigervncX.org Xorg-serverX.org XwaylandFedoraproject Fedora 39Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Power Little Endian 7.0
7.8
CVSSv3

CVE-2024-0409

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
Tigervnc TigervncX.org Xorg-serverX.org XwaylandFedoraproject Fedora 39Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Power Little Endian 7.0
6.5
CVSSv3

CVE-2023-5455

A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an malicious user to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and syst...
Freeipa FreeipaFreeipa Freeipa 4.11.0Fedoraproject Fedora 38Fedoraproject Fedora 39Fedoraproject Fedora 40Redhat Codeready Linux Builder -Redhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 8.4Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Eus 8.6
8.8
CVSSv3

CVE-2023-5869

A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overfl...
Postgresql PostgresqlPostgresql Postgresql 16.0Redhat Codeready Linux Builder Eus 9.2Redhat Codeready Linux Builder Eus For Power Little Endian Eus 9.0 Ppc64leRedhat Codeready Linux Builder Eus For Power Little Endian Eus 9.2 Ppc64leRedhat Codeready Linux Builder For Arm64 Eus 8.6 Aarch64Redhat Codeready Linux Builder For Arm64 Eus 9.0 Aarch64Redhat Codeready Linux Builder For Arm64 Eus 9.2 Aarch64Redhat Codeready Linux Builder For Ibm Z Systems Eus 9.0 S390xRedhat Codeready Linux Builder For Ibm Z Systems Eus 9.2 S390xRedhat Codeready Linux Builder For Power Little Endian Eus 9.0 Ppc64leRedhat Codeready Linux Builder For Power Little Endian Eus 9.2 Ppc64le
7.8
CVSSv3

CVE-2023-3972

A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and directories that lead to local privilege escalation. Before the insights-client has been registered on the system by root, an unp...
Redhat Insights-clientRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Aus 8.6Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Arm 64 8.0Redhat Enterprise Linux For Arm 64 Eus 8.6
7.8
CVSSv3

CVE-2023-5367

A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrprope...
X.org X ServerX.org XwaylandRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0 S390xRedhat Enterprise Linux For Power Big Endian 7.0 Ppc64Redhat Enterprise Linux For Power Little Endian 7.0 Ppc64leRedhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Workstation 7.0
7.8
CVSSv3

CVE-2023-3899

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.re...
Redhat Subscription-managerFedoraproject Fedora 37Fedoraproject Fedora 38Redhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Eus 8.8Redhat Enterprise Linux Eus 9.0Redhat Enterprise Linux Eus 9.2Redhat Enterprise Linux For Arm 64 8.0Redhat Enterprise Linux For Arm 64 9.0
7.8
CVSSv3

CVE-2023-0494

A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where th...
X.org X ServerFedoraproject Fedora 36Fedoraproject Fedora 37Redhat Enterprise Linux 8.0Redhat Enterprise Linux 8.1Redhat Enterprise Linux 9.0Redhat Enterprise Linux Aus 8.4Redhat Enterprise Linux Aus 8.6Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Eus 8.6Redhat Enterprise Linux Eus 9.0
8.8
CVSSv3

CVE-2019-8720

A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
Webkitgtk WebkitgtkWpewebkit Wpe WebkitRedhat Codeready Linux Builder 8.0Redhat Codeready Linux Builder Eus 8.4Redhat Codeready Linux Builder Eus 8.6Redhat Codeready Linux Builder For Arm64 Eus 8.0Redhat Codeready Linux Builder For Arm64 Eus 8.4Redhat Codeready Linux Builder For Arm64 Eus 8.6Redhat Codeready Linux Builder For Ibm Z Systems Eus 8.0Redhat Codeready Linux Builder For Ibm Z Systems Eus 8.4Redhat Codeready Linux Builder For Ibm Z Systems Eus 8.6Redhat Codeready Linux Builder For Power Little Endian Eus 8.0
8.8
CVSSv3

CVE-2022-4254

sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
Fedoraproject SssdRedhat Enterprise Linux 8.0Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux For Ibm Z Systems 7.0Redhat Enterprise Linux For Power Big Endian 7.0Redhat Enterprise Linux For Power Little Endian 7.0Redhat Enterprise Linux For Scientific Computing 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2Redhat Enterprise Linux Server Tus 8.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
log injectionCVE-2024-42327CVE-2024-53691cameraCVE-2024-53810CVE-2024-41649logic flawCVE-2024-38921CVE-2024-41713
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook