agentprime: red-hat-enterprise-linux-8-4-update-services-for-sap-solutions

agentprime: red-hat-enterprise-linux-8-4-update-services-for-sap-solutionsEvery new CVE for red-hat-enterprise-linux-8-4-update-services-for-sap-solutions.https://agentprime.io/CVE-2025-46421: Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a serverhttps://agentprime.io/advisories/CVE-2025-46421/https://agentprime.io/advisories/CVE-2025-46421/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Apr 2025 13:01:24 GMTCVECVE-2025-46420: Libsoup: memory leak on soup_header_parse_quality_list() via soup-headers.chttps://agentprime.io/advisories/CVE-2025-46420/https://agentprime.io/advisories/CVE-2025-46420/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Apr 2025 12:58:01 GMTCVECVE-2025-32911: Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valuehttps://agentprime.io/advisories/CVE-2025-32911/https://agentprime.io/advisories/CVE-2025-32911/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Apr 2025 15:39:34 GMTCVEcriticalCVE-2025-32906: Libsoup: out of bounds reads in soup_headers_parse_request()https://agentprime.io/advisories/CVE-2025-32906/https://agentprime.io/advisories/CVE-2025-32906/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 13:58:39 GMTCVECVE-2025-32913: Libsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition headerhttps://agentprime.io/advisories/CVE-2025-32913/https://agentprime.io/advisories/CVE-2025-32913/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 13:37:36 GMTCVECVE-2025-3155: Yelp: arbitrary file readhttps://agentprime.io/advisories/CVE-2025-3155/https://agentprime.io/advisories/CVE-2025-3155/CVSS 7.4 (High). Critical: CVSS score 7.4 (7.0 or more) and EPSS 0.13 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Apr 2025 13:34:18 GMTCVEcriticalCVE-2024-8176: Libexpat: expat: improper restriction of xml entity expansion depth in libexpathttps://agentprime.io/advisories/CVE-2024-8176/https://agentprime.io/advisories/CVE-2024-8176/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Mar 2025 08:19:48 GMTCVECVE-2025-26601: Xorg: xwayland: use-after-free in syncinittrigger()https://agentprime.io/advisories/CVE-2025-26601/https://agentprime.io/advisories/CVE-2025-26601/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:55:36 GMTCVECVE-2025-26600: Xorg: xwayland: use-after-free in playreleasedevents()https://agentprime.io/advisories/CVE-2025-26600/https://agentprime.io/advisories/CVE-2025-26600/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:55:20 GMTCVECVE-2025-26599: Xorg: xwayland: use of uninitialized pointer in compredirectwindow()https://agentprime.io/advisories/CVE-2025-26599/https://agentprime.io/advisories/CVE-2025-26599/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:55:02 GMTCVECVE-2025-26598: Xorg: xwayland: out-of-bounds write in createpointerbarrierclient()https://agentprime.io/advisories/CVE-2025-26598/https://agentprime.io/advisories/CVE-2025-26598/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:57 GMTCVECVE-2025-26597: Xorg: xwayland: buffer overflow in xkbchangetypesofkey()https://agentprime.io/advisories/CVE-2025-26597/https://agentprime.io/advisories/CVE-2025-26597/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:48 GMTCVECVE-2025-26596: Xorg: xwayland: heap overflow in xkbwritekeysyms()https://agentprime.io/advisories/CVE-2025-26596/https://agentprime.io/advisories/CVE-2025-26596/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:23 GMTCVECVE-2025-26595: Xorg: xwayland: buffer overflow in xkbvmodmasktext()https://agentprime.io/advisories/CVE-2025-26595/https://agentprime.io/advisories/CVE-2025-26595/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:54:06 GMTCVECVE-2025-26594: X.org: xwayland: use-after-free of the root cursorhttps://agentprime.io/advisories/CVE-2025-26594/https://agentprime.io/advisories/CVE-2025-26594/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Feb 2025 15:53:51 GMTCVECVE-2025-0624: Grub2: net: out-of-bounds write in grub_net_search_config_file()https://agentprime.io/advisories/CVE-2025-0624/https://agentprime.io/advisories/CVE-2025-0624/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 18:23:21 GMTCVECVE-2025-1244: Emacs: shell injection vulnerability in gnu emacs via custom "man" uri schemehttps://agentprime.io/advisories/CVE-2025-1244/https://agentprime.io/advisories/CVE-2025-1244/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Feb 2025 14:27:45 GMTCVECVE-2024-12085: Rsync: info leak via uninitialized stack contentshttps://agentprime.io/advisories/CVE-2024-12085/https://agentprime.io/advisories/CVE-2024-12085/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 17:37:16 GMTCVECVE-2024-52337: Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodhttps://agentprime.io/advisories/CVE-2024-52337/https://agentprime.io/advisories/CVE-2024-52337/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Nov 2024 15:21:17 GMTCVECVE-2024-9632: Xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2024-9632/https://agentprime.io/advisories/CVE-2024-9632/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Oct 2024 07:42:35 GMTCVECVE-2024-9050: Networkmanager-libreswan: local privilege escalation via leftupdownhttps://agentprime.io/advisories/CVE-2024-9050/https://agentprime.io/advisories/CVE-2024-9050/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Oct 2024 12:14:31 GMTCVECVE-2024-45770: Pcp: pmpost symlink attack allows escalating pcp to root userhttps://agentprime.io/advisories/CVE-2024-45770/https://agentprime.io/advisories/CVE-2024-45770/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Sep 2024 08:45:37 GMTCVECVE-2024-45769: Pcp: pmcd heap corruption through metric pmstore operationshttps://agentprime.io/advisories/CVE-2024-45769/https://agentprime.io/advisories/CVE-2024-45769/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Sep 2024 08:45:06 GMTCVECVE-2024-4467: Qemu-kvm: 'qemu-img info' leads to host file read/writehttps://agentprime.io/advisories/CVE-2024-4467/https://agentprime.io/advisories/CVE-2024-4467/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jul 2024 15:57:23 GMTCVECVE-2024-3183: Freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute forcehttps://agentprime.io/advisories/CVE-2024-3183/https://agentprime.io/advisories/CVE-2024-3183/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Jun 2024 08:18:51 GMTCVECVE-2023-4727: Ca: token authentication bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2023-4727/https://agentprime.io/advisories/CVE-2023-4727/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Jun 2024 19:30:25 GMTCVECVE-2024-3049: Booth: specially crafted hash can lead to invalid hmac being accepted by booth serverhttps://agentprime.io/advisories/CVE-2024-3049/https://agentprime.io/advisories/CVE-2024-3049/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Jun 2024 05:30:04 GMTCVECVE-2024-5564: Libndp: buffer overflow in route information length fieldhttps://agentprime.io/advisories/CVE-2024-5564/https://agentprime.io/advisories/CVE-2024-5564/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 May 2024 18:31:47 GMTCVECVE-2024-31083: Xorg-x11-server: use-after-free in procrenderaddglyphshttps://agentprime.io/advisories/CVE-2024-31083/https://agentprime.io/advisories/CVE-2024-31083/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 12:04:49 GMTCVECVE-2024-31081: Xorg-x11-server: heap buffer overread/data leakage in procxipassivegrabdevicehttps://agentprime.io/advisories/CVE-2024-31081/https://agentprime.io/advisories/CVE-2024-31081/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:48:12 GMTCVECVE-2024-31080: Xorg-x11-server: heap buffer overread/data leakage in procxigetselectedeventshttps://agentprime.io/advisories/CVE-2024-31080/https://agentprime.io/advisories/CVE-2024-31080/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 Apr 2024 13:47:33 GMTCVECVE-2024-3019: Pcp: exposure of the redis server backend allows remote command execution via pmproxyhttps://agentprime.io/advisories/CVE-2024-3019/https://agentprime.io/advisories/CVE-2024-3019/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Mar 2024 18:32:43 GMTCVECVE-2024-21886: Xorg-x11-server: heap buffer overflow in disabledevicehttps://agentprime.io/advisories/CVE-2024-21886/https://agentprime.io/advisories/CVE-2024-21886/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:13:12 GMTCVECVE-2024-21885: Xorg-x11-server: heap buffer overflow in xisenddevicehierarchyeventhttps://agentprime.io/advisories/CVE-2024-21885/https://agentprime.io/advisories/CVE-2024-21885/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Feb 2024 12:11:59 GMTCVECVE-2024-1488: Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalationhttps://agentprime.io/advisories/CVE-2024-1488/https://agentprime.io/advisories/CVE-2024-1488/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Feb 2024 05:04:13 GMTCVECVE-2024-0229: Xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory accesshttps://agentprime.io/advisories/CVE-2024-0229/https://agentprime.io/advisories/CVE-2024-0229/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Feb 2024 06:29:51 GMTCVECVE-2023-40551: Shim: out of bounds read when parsing mz binarieshttps://agentprime.io/advisories/CVE-2023-40551/https://agentprime.io/advisories/CVE-2023-40551/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:46:43 GMTCVECVE-2023-40546: Shim: out-of-bounds read printing error messageshttps://agentprime.io/advisories/CVE-2023-40546/https://agentprime.io/advisories/CVE-2023-40546/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40549: Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe filehttps://agentprime.io/advisories/CVE-2023-40549/https://agentprime.io/advisories/CVE-2023-40549/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:26 GMTCVECVE-2023-40550: Shim: out-of-bound read in verify_buffer_sbat()https://agentprime.io/advisories/CVE-2023-40550/https://agentprime.io/advisories/CVE-2023-40550/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 16:29:23 GMTCVECVE-2023-40548: Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systemshttps://agentprime.io/advisories/CVE-2023-40548/https://agentprime.io/advisories/CVE-2023-40548/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jan 2024 14:53:44 GMTCVECVE-2023-40547: Shim: rce in http boot support may lead to secure boot bypasshttps://agentprime.io/advisories/CVE-2023-40547/https://agentprime.io/advisories/CVE-2023-40547/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jan 2024 15:54:23 GMTCVECVE-2023-6816: Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerhttps://agentprime.io/advisories/CVE-2023-6816/https://agentprime.io/advisories/CVE-2023-6816/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jan 2024 04:31:07 GMTCVEcriticalCVE-2024-0646: Kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destinationhttps://agentprime.io/advisories/CVE-2024-0646/https://agentprime.io/advisories/CVE-2024-0646/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jan 2024 15:16:45 GMTCVECVE-2023-5455: Ipa: invalid csrf protectionhttps://agentprime.io/advisories/CVE-2023-5455/https://agentprime.io/advisories/CVE-2023-5455/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jan 2024 12:33:00 GMTCVECVE-2023-7192: Kernel: refcount leak in ctnetlink_create_conntrack()https://agentprime.io/advisories/CVE-2023-7192/https://agentprime.io/advisories/CVE-2023-7192/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jan 2024 19:02:45 GMTCVECVE-2023-6546: Kernel: gsm multiplexing race condition leads to privilege escalationhttps://agentprime.io/advisories/CVE-2023-6546/https://agentprime.io/advisories/CVE-2023-6546/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Dec 2023 20:01:03 GMTCVECVE-2023-6478: Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderpropertyhttps://agentprime.io/advisories/CVE-2023-6478/https://agentprime.io/advisories/CVE-2023-6478/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:41 GMTCVECVE-2023-6377: Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actionshttps://agentprime.io/advisories/CVE-2023-6377/https://agentprime.io/advisories/CVE-2023-6377/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 13 Dec 2023 06:27:40 GMTCVECVE-2023-5870: Postgresql: role pg_signal_backend can signal certain superuser processes.https://agentprime.io/advisories/CVE-2023-5870/https://agentprime.io/advisories/CVE-2023-5870/CVSS 2.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 10 Dec 2023 17:58:30 GMTCVE