linuxfoundation Vulnerability Advisory Catalog

Total 533 security vulnerabilities recorded for linuxfoundation software and firmware.

← Back to All Vendors
Component: yocto

In Wi-Fi driver, there is a possible way to disconnect Wi-Fi due to an improper resource release. This could lead to remote denial of service with no ...

📅 2022-10-07
CVSS 7.5 Dossier →
Component: yocto

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution...

📅 2022-10-07
CVSS 6.7 Dossier →
CVE-2022-39222 CRITICAL
Component: dex

Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex instances with public clients (and by extension, clien...

📅 2022-10-06
CVSS 9.3 Dossier →
Component: dapr_dashboard

Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data....

📅 2022-10-03
CVSS 7.5 Dossier →
CVE-2022-36025 CRITICAL
Component: besu

Besu is a Java-based Ethereum client. In versions newer than 22.1.3 and prior to 22.7.1, Besu is subject to an Incorrect Conversion between Numeric Ty...

📅 2022-09-24
CVSS 9.1 Dossier →
Component: indy-node

indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-nod...

📅 2022-09-09
CVSS 7.5 Dossier →
Component: indy-node

Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In versions 1.12.4 and prior, the `pool-upgrade` req...

📅 2022-09-06
CVSS 8.8 Dossier →
CVE-2022-35942 CRITICAL
Component: loopback-connector-postgresql

Improper input validation on the `contains` LoopBack filter may allow for arbitrary SQL injection. When the extended filter property `contains` is per...

📅 2022-08-12
CVSS 9.3 Dossier →
CVE-2022-0670 CRITICAL
Component: ceph

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system...

📅 2022-07-25
CVSS 9.1 Dossier →
CVE-2022-34632 CRITICAL
Component: rocket_chip_generator

Rocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain insufficient cryptography via the component /rocket/RocketCore.s...

📅 2022-07-18
CVSS 9.1 Dossier →
Component: kubeedge

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1...

📅 2022-07-11
CVSS 4.4 Dossier →
Component: kubeedge

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1...

📅 2022-07-11
CVSS 4.4 Dossier →
Component: kubeedge

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1...

📅 2022-07-11
CVSS 4.4 Dossier →
Component: kubeedge

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1...

📅 2022-07-11
CVSS 4.9 Dossier →
Component: kubeedge

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1...

📅 2022-07-11
CVSS 4.5 Dossier →
Component: kubeedge

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1...

📅 2022-07-11
CVSS 6.5 Dossier →
Component: kubeedge

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected v...

📅 2022-06-27
CVSS 4.0 Dossier →
Component: kubeedge

KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In affected v...

📅 2022-06-27
CVSS 4.2 Dossier →
Component: containerd

containerd is an open source container runtime. A bug was found in the containerd's CRI implementation where programs inside a container can cause the...

📅 2022-06-09
CVSS 5.5 Dossier →
Component: runc

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 whe...

📅 2022-05-17
CVSS 5.9 Dossier →
Component: imgcrypt

The imgcrypt library provides API exensions for containerd to support encrypted container images and implements the ctd-decoder command line tool for ...

📅 2022-03-25
CVSS 7.5 Dossier →
Component: grpc_swift

grpc-swift is the Swift language implementation of gRPC, a remote procedure call (RPC) framework. Prior to version 1.7.2, a grpc-swift server is vulne...

📅 2022-03-25
CVSS 7.5 Dossier →
Component: nats-server

NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-ser...

📅 2022-03-10
CVSS 6.5 Dossier →
Component: containerd

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14...

📅 2022-03-03
CVSS 7.5 Dossier →
Page 18 of 23 (533 Total Records)