redhat-cnalr

Latest CVEs · RSS

• CVE-2026-97875 2026-09-25 · CVSS 8.1
  Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all
• CVE-2026-75895 2026-09-18
  In libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue was found in the at smpp34_unpack() function via attacker controlled SMPP PDUs, leading to memory
• CVE-2026-75894 2026-09-18
  In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() function via a arbitrarily sized NAS-PDU that leads to process
• CVE-2026-75893 2026-09-18
  In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccess_proxy_read_msg()  function via IPA frame lengths.
• CVE-2026-75892 2026-09-18
  In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context GSN-Address sub-field, leading to memory
• CVE-2026-75031 2026-09-18
  In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin feature. In default instal
• CVE-2026-71568 2026-09-17 · CVSS 5.3
  In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting the problem requires winning the race with bmctest itself,
• CVE-2026-71567 2026-08-17 · CVSS 7.7
  In openshift-metal3/fakefish there is a repeated pattern in some of the scripts where shell variables are injected without quoting them either into command lin
• CVE-2026-71566 2026-08-17 · CVSS 9.3
  FakeFish handles incoming credentials by passing them down to scripts. This works for real hardware because in the end it's up to the BMC to validate them. Ho
• CVE-2026-15720 2026-07-14 · CVSS 8.6
  In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of
• CVE-2026-40472 2026-04-23 · CVSS 9.9
  In hackage-server, user-controlled metadata from .cabal files are rendered into HTML href attributes without proper sanitization, enabling stored Cross-Site Scr
• CVE-2026-40471 2026-04-23 · CVSS 9.6
  hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, poss
• CVE-2026-40470 2026-04-23 · CVSS 9.9
  A critical XSS vulnerability affected hackage-server and hackage.haskell.org. HTML and JavaScript files provided in source packages or via the documentation up
• CVE-2026-1616 2026-01-29 · CVSS 7.5
  The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query
• CVE-2025-31162 2025-03-28 · CVSS 6.6
  Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.
• CVE-2025-31163 2025-03-28 · CVSS 6.6
  Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.
• CVE-2025-31164 2025-03-28 · CVSS 6.6
  heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.
• CVE-2025-2312 2025-03-25 · CVSS 5.9
  A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong nam