linuxfoundation Vulnerability Advisory Catalog

Total 533 security vulnerabilities recorded for linuxfoundation software and firmware.

← Back to All Vendors
Component: yocto

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio...

๐Ÿ“… 2024-10-07
CVSS 6.7 Dossier →
CVE-2023-27584 CRITICAL
Component: dragonfly

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation (CNCF) as...

๐Ÿ“… 2024-09-19
CVSS 9.8 Dossier →
Component: backstage

Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inj...

๐Ÿ“… 2024-09-17
CVSS 6.5 Dossier →
Component: backstage

Backstage is an open framework for building developer portals. When using the AWS S3 or GCS storage provider for TechDocs it is possible to access con...

๐Ÿ“… 2024-09-17
CVSS 6.5 Dossier →
Component: backstage

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog ba...

๐Ÿ“… 2024-09-17
CVSS 6.5 Dossier →
Component: runc

runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, ...

๐Ÿ“… 2024-09-03
CVSS 3.6 Dossier →
Component: yocto

In wlan, there is a possible denial of service due to incorrect error handling. This could lead to remote denial of service with no additional executi...

๐Ÿ“… 2024-09-02
CVSS 7.5 Dossier →
Component: yocto

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution ...

๐Ÿ“… 2024-09-02
CVSS 4.4 Dossier →
Component: yocto

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution ...

๐Ÿ“… 2024-09-02
CVSS 4.4 Dossier →
Component: harbor

Incorrect user permission validation in Harbor <v2.9.5 and Harbor <v2.10.3 allows authenticated users to modify configurations....

๐Ÿ“… 2024-08-02
CVSS 6.4 Dossier →
Component: yocto

In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with Syste...

๐Ÿ“… 2024-07-01
CVSS 6.7 Dossier →
CVE-2024-20080 CRITICAL
Component: yocto

In gnss service, there is a possible escalation of privilege due to improper certificate validation. This could lead to remote escalation of privilege...

๐Ÿ“… 2024-07-01
CVSS 9.8 Dossier →
Component: harbor

SQL-Injection in Harbor allows priviledge users to leak the task IDs...

๐Ÿ“… 2024-06-11
CVSS 2.7 Dossier →
Component: harbor

Open Redirect in Harborย  <=v2.8.4, <=v2.9.2, and <=v2.10.0 may redirect a user to a malicious site....

๐Ÿ“… 2024-06-10
CVSS 4.3 Dossier →
Component: onnx

A vulnerability in the `download_model_with_test_data` function of the onnx/onnx framework, version 1.16.0, allows for arbitrary file overwrite due to...

๐Ÿ“… 2024-06-06
CVSS 8.8 Dossier →
Component: yocto

In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional exe...

๐Ÿ“… 2024-05-06
CVSS 5.3 Dossier →
Component: ric-app-kpimon-go

O-RAN RICAPP kpimon-go I-Release has a segmentation violation via a certain E2AP-PDU message....

๐Ÿ“… 2024-04-30
CVSS 5.3 Dossier →
Component: onos-lib-go

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString....

๐Ÿ“… 2024-04-30
CVSS 5.5 Dossier →
Component: onos-lib-go

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits....

๐Ÿ“… 2024-04-30
CVSS 8.1 Dossier →
Component: onos-ric-sdk-go

Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (in the Subscribe function impl...

๐Ÿ“… 2024-04-30
CVSS 6.5 Dossier →
Component: onos-kpimon

Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function of the monitoring package....

๐Ÿ“… 2024-04-30
CVSS 6.5 Dossier →
Component: onos-kpimon

Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 function....

๐Ÿ“… 2024-04-30
CVSS 8.1 Dossier →
Component: pytorch

Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp....

๐Ÿ“… 2024-04-19
CVSS 5.5 Dossier →
Component: pytorch

Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp....

๐Ÿ“… 2024-04-17
CVSS 7.8 Dossier →
Page 11 of 23 (533 Total Records)