agentprime: red-hat-discovery-2Every new CVE for red-hat-discovery-2.https://agentprime.io/CVE-2026-89091: Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionhttps://agentprime.io/advisories/CVE-2026-89091/https://agentprime.io/advisories/CVE-2026-89091/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 21:49:30 GMTCVECVE-2026-18477: Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escapehttps://agentprime.io/advisories/CVE-2026-18477/https://agentprime.io/advisories/CVE-2026-18477/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 15:34:36 GMTCVECVE-2026-18508: Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwritehttps://agentprime.io/advisories/CVE-2026-18508/https://agentprime.io/advisories/CVE-2026-18508/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 14:51:41 GMTCVECVE-2026-58016: Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"https://agentprime.io/advisories/CVE-2026-58016/https://agentprime.io/advisories/CVE-2026-58016/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 13:02:45 GMTCVECVE-2026-13757: P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsinghttps://agentprime.io/advisories/CVE-2026-13757/https://agentprime.io/advisories/CVE-2026-13757/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2026 18:44:24 GMTCVECVE-2026-42014: Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinhttps://agentprime.io/advisories/CVE-2026-42014/https://agentprime.io/advisories/CVE-2026-42014/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 00:49:15 GMTCVECVE-2026-5419: Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalhttps://agentprime.io/advisories/CVE-2026-5419/https://agentprime.io/advisories/CVE-2026-5419/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 19:26:56 GMTCVECVE-2026-42015: Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlinghttps://agentprime.io/advisories/CVE-2026-42015/https://agentprime.io/advisories/CVE-2026-42015/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 21:29:32 GMTCVECVE-2026-3832: Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp responsehttps://agentprime.io/advisories/CVE-2026-3832/https://agentprime.io/advisories/CVE-2026-3832/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 17:41:28 GMTCVECVE-2026-5704: Tar: tar: hidden file injection via crafted archiveshttps://agentprime.io/advisories/CVE-2026-5704/https://agentprime.io/advisories/CVE-2026-5704/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 15:17:27 GMTCVECVE-2026-4111: Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivehttps://agentprime.io/advisories/CVE-2026-4111/https://agentprime.io/advisories/CVE-2026-4111/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 11:45:20 GMTCVECVE-2025-14831: Gnutls: gnutls: denial of service via excessive resource consumption during certificate verificationhttps://agentprime.io/advisories/CVE-2025-14831/https://agentprime.io/advisories/CVE-2025-14831/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 14:51:32 GMTCVECVE-2025-9820: Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() functionhttps://agentprime.io/advisories/CVE-2025-9820/https://agentprime.io/advisories/CVE-2025-9820/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Jan 2026 19:58:32 GMTCVECVE-2025-10911: Libxslt: use-after-free with key data stored cross-rvthttps://agentprime.io/advisories/CVE-2025-10911/https://agentprime.io/advisories/CVE-2025-10911/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Sep 2025 15:13:14 GMTCVECVE-2025-9900: Libtiff: libtiff write-what-wherehttps://agentprime.io/advisories/CVE-2025-9900/https://agentprime.io/advisories/CVE-2025-9900/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Sep 2025 16:26:22 GMTCVECVE-2025-8941: Linux-pam: incomplete fix for cve-2025-6020https://agentprime.io/advisories/CVE-2025-8941/https://agentprime.io/advisories/CVE-2025-8941/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Aug 2025 14:42:37 GMTCVECVE-2025-6395: Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()https://agentprime.io/advisories/CVE-2025-6395/https://agentprime.io/advisories/CVE-2025-6395/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 15:20:46 GMTCVECVE-2025-32990: Gnutls: vulnerability in gnutls certtool template parsinghttps://agentprime.io/advisories/CVE-2025-32990/https://agentprime.io/advisories/CVE-2025-32990/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 09:41:46 GMTCVECVE-2025-32989: Gnutls: vulnerability in gnutls sct extension parsinghttps://agentprime.io/advisories/CVE-2025-32989/https://agentprime.io/advisories/CVE-2025-32989/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 08:05:26 GMTCVECVE-2025-32988: Gnutls: vulnerability in gnutls othername san exporthttps://agentprime.io/advisories/CVE-2025-32988/https://agentprime.io/advisories/CVE-2025-32988/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 08:04:57 GMTCVECVE-2025-6170: Libxml2: stack buffer overflow in xmllint interactive shell command handlinghttps://agentprime.io/advisories/CVE-2025-6170/https://agentprime.io/advisories/CVE-2025-6170/CVSS 2.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 15:24:05 GMTCVECVE-2025-4598: Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dumphttps://agentprime.io/advisories/CVE-2025-4598/https://agentprime.io/advisories/CVE-2025-4598/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 May 2025 13:13:26 GMTCVECVE-2025-5278: Coreutils: heap buffer under-read in gnu coreutils sort via key specificationhttps://agentprime.io/advisories/CVE-2025-5278/https://agentprime.io/advisories/CVE-2025-5278/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 May 2025 20:52:58 GMTCVECVE-2025-3576: Krb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionshttps://agentprime.io/advisories/CVE-2025-3576/https://agentprime.io/advisories/CVE-2025-3576/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 05:55:26 GMTCVECVE-2024-12086: Rsync: rsync server leaks arbitrary client fileshttps://agentprime.io/advisories/CVE-2024-12086/https://agentprime.io/advisories/CVE-2024-12086/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 17:37:54 GMTCVECVE-2023-52356: Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of servicehttps://agentprime.io/advisories/CVE-2023-52356/https://agentprime.io/advisories/CVE-2023-52356/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jan 2024 20:03:40 GMTCVECVE-2023-52355: Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomhttps://agentprime.io/advisories/CVE-2023-52355/https://agentprime.io/advisories/CVE-2023-52355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jan 2024 20:03:35 GMTCVE