CVE-2021-3669

all versions

A flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with large shared memory segment counts

5.5MEDIUM

CVE-2021-3697

all versions

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap.

7.0HIGH

CVE-2021-3696

all versions

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in

4.5MEDIUM

CVE-2021-3695

all versions

A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to

4.5MEDIUM

CVE-2022-1227

all versions

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. O

8.8HIGH

CVE-2022-27649

all versions

A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was foun

7.5HIGH

CVE-2022-0330

all versions

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicio

7.8HIGH

CVE-2022-1011

all versions

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a loc

7.8HIGH

CVE-2021-3744

all versions

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allo

5.5MEDIUM

CVE-2019-17596

all versions

Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public ke

7.5HIGH

CVE-2019-16276

all versions

Go before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.

7.5HIGH

CVE-2019-9514

all versions

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a numb

7.5HIGH

CVE-2018-16871

all versions

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is a

7.5HIGH

CVE-2019-9741

all versions

An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstr

6.1MEDIUM

CVE-2017-15041

all versions

Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange t

9.8CRITICAL