Vulnerability & Exploit Database

Red Hat: CVE-2023-6861: Mozilla: Heap buffer overflow affected <code>nsWindow::PickerOpen(void)</code> in headless mode (Multiple Advisories)

Red Hat: CVE-2023-6858: Mozilla: Heap buffer overflow in <code>nsTextFragment</code> (Multiple Advisories)

Red Hat: CVE-2023-6860: Mozilla: Potential sandbox escape due to <code>VideoBridge</code> lack of texture validation (Multiple Advisories)

Red Hat: CVE-2023-50761: Mozilla: S/MIME signature accepted despite mismatching message date (Multiple Advisories)

Red Hat: CVE-2023-6856: Mozilla: Heap-buffer-overflow affecting WebGL <code>DrawElementsInstanced</code> method with Mesa VM driver (Multiple Advisories)

Red Hat: CVE-2023-6135: nss: vulnerable to Minerva side-channel information leak (Multiple Advisories)

Red Hat OpenShift: CVE-2023-48795: ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

Red Hat: CVE-2023-51385: openssh: potential command injection via shell metacharacters (Multiple Advisories)

Red Hat: CVE-2023-6817: kernel: inactive elements in nft_pipapo_walk (Multiple Advisories)

Red Hat: CVE-2023-48795: ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (Multiple Advisories)

Red Hat JBoss EAP: Improper Validation of Integrity Check Value (CVE-2023-48795)

Red Hat: CVE-2023-50269: squid: denial of service in HTTP request parsing (Multiple Advisories)

Red Hat: CVE-2023-44446: gstreamer: MXF demuxer use-after-free vulnerability (Multiple Advisories)

Red Hat: CVE-2023-6377: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions (Multiple Advisories)

Red Hat: CVE-2023-6478: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty (Multiple Advisories)

Red Hat: CVE-2023-44429: gstreamer: AV1 codec parser heap-based buffer overflow (Multiple Advisories)

Red Hat JBoss EAP: Allocation of Resources Without Limits or Throttling (CVE-2023-5379)

Red Hat: CVE-2023-6186: libreoffice: Insufficient macro permission validation leading to macro execution (Multiple Advisories)

Red Hat: CVE-2023-6185: libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution (Multiple Advisories)

Red Hat: CVE-2023-6535: kernel: NULL pointer dereference in nvmet_tcp_execute_request (Multiple Advisories)