Vulnerability & Exploit Database

Red Hat OpenShift: CVE-2024-1394: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads

Red Hat OpenShift: CVE-2024-0793: kube-controller-manager: malformed HPA v1 manifest causes crash

Red Hat: CVE-2024-28834: gnutls: vulnerable to Minerva side-channel information leak (Multiple Advisories)

Red Hat: CVE-2024-28835: gnutls: potential crash during chain building/verification (Multiple Advisories)

Red Hat: CVE-2024-1394: golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads (Multiple Advisories)

Red Hat: CVE-2024-2607: Mozilla: JIT code failed to save return registers on Armv7-A (Multiple Advisories)

Red Hat: CVE-2024-22017: nodejs: setuid() does not drop all privileges due to io_uring (Multiple Advisories)

Red Hat: CVE-2024-2616: Mozilla: Improve handling of out-of-memory conditions in ICU (Multiple Advisories)

Red Hat: CVE-2024-2614: Mozilla: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 (Multiple Advisories)

Red Hat: CVE-2024-2608: Mozilla: Integer overflow could have led to out of bounds write (Multiple Advisories)

Red Hat: CVE-2024-2610: Mozilla: Improper handling of html and body tags enabled CSP nonce leakage (Multiple Advisories)

Red Hat: CVE-2024-2611: Mozilla: Clickjacking vulnerability could have led to a user accidentally granting permissions (Multiple Advisories)

Red Hat: CVE-2024-2609: Mozilla: Permission prompt input delay could expire when not in focus (Multiple Advisories)

Red Hat: CVE-2024-2612: Mozilla: Self referencing object could have potentially led to a use-after-free (Multiple Advisories)

Red Hat: CVE-2024-21392: dotnet: DoS in .NET Core / YARP HTTP / 2 WebSocket support (Multiple Advisories)

SUSE: CVE-2024-26614: SUSE Linux Security Advisory

Red Hat: CVE-2024-28757: expat: XML Entity Expansion (Multiple Advisories)

Red Hat OpenShift: CVE-2024-28180: jose-go: improper handling of highly compressed data

Red Hat: CVE-2024-25111: squid: Denial of Service in HTTP Chunked Decoding (Multiple Advisories)

Red Hat OpenShift: CVE-2024-24786: golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON