linuxfoundation Vulnerability Advisory Catalog

Total 533 security vulnerabilities recorded for linuxfoundation software and firmware.

← Back to All Vendors
Component: yocto

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution p...

📅 2023-06-06
CVSS 4.4 Dossier →
Component: yocto

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution p...

📅 2023-06-06
CVSS 4.4 Dossier →
Component: yocto

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution p...

📅 2023-06-06
CVSS 4.4 Dossier →
Component: iot-yocto

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution...

📅 2023-06-06
CVSS 6.7 Dossier →
Component: iot-yocto

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution...

📅 2023-06-06
CVSS 6.7 Dossier →
Component: iot-yocto

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution...

📅 2023-06-06
CVSS 6.7 Dossier →
Component: yocto

In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution p...

📅 2023-06-06
CVSS 4.4 Dossier →
Component: lima

Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual machine instance with a malicious...

📅 2023-05-30
CVSS 2.7 Dossier →
Component: rekor

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed ...

📅 2023-05-26
CVSS 5.3 Dossier →
Component: cups-filters

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. I...

📅 2023-05-17
CVSS 8.8 Dossier →
Component: yocto

In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additiona...

📅 2023-05-15
CVSS 3.3 Dossier →
Component: vitess

Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intenti...

📅 2023-05-11
CVSS 4.1 Dossier →
Component: fluid

Fluid is an open source Kubernetes-native distributed dataset orchestrator and accelerator for data-intensive applications. Starting in version 0.7.0 ...

📅 2023-05-08
CVSS 5.8 Dossier →
Component: rekor

Rekor is an open source software supply chain transparency log. Rekor prior to version 1.1.1 may crash due to out of memory (OOM) conditions caused by...

📅 2023-05-08
CVSS 7.5 Dossier →
Component: baremetal_operator

Baremetal Operator (BMO) is a bare metal host provisioning integration for Kubernetes. Prior to version 0.3.0, ironic and ironic-inspector deployed wi...

📅 2023-04-26
CVSS 6.0 Dossier →
CVE-2023-2250 MEDIUM
Component: open_cluster_management

A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controlle...

📅 2023-04-24
CVSS 6.7 Dossier →
Component: kubewarden-controller

An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount ...

📅 2023-04-19
CVSS 8.0 Dossier →
Component: vitess

Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `...

📅 2023-04-14
CVSS 4.1 Dossier →
Component: openfeature

The OpenFeature Operator allows users to expose feature flags to applications. Assuming the pre-existence of a vulnerability that allows for arbitrary...

📅 2023-04-14
CVSS 8.0 Dossier →
Component: cubefs

CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-cluster-role and can thus list al...

📅 2023-04-12
CVSS 6.5 Dossier →
Component: runc

runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` ins...

📅 2023-03-29
CVSS 6.1 Dossier →
Component: runc

runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes ...

📅 2023-03-29
CVSS 5.0 Dossier →
Component: argo-cd

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications....

📅 2023-03-27
CVSS 4.3 Dossier →
Component: runc

runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an atta...

📅 2023-03-03
CVSS 7.0 Dossier →
Page 16 of 23 (533 Total Records)