Red Hat Enterprise Linux Update Services For Sap Solutions 9.2
Approved changes feed: RSS · Atom
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
part: o version: 9.2 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Enterprise Linux Update Services For Sap Solutions (bb8a1217-5db1-5610-8a11-ba0f33996e6d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3155 |
vulnerable | 2026-06-08 07:23:08.352066 |
Yelp: arbitrary file read
HIGH (7.4)
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.
Published: 2025-04-03T13:34:18.878Z
Updated: 2026-06-29T20:36:07.629Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2784 |
vulnerable | 2026-06-08 07:16:58.324132 |
Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
HIGH (7)
A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
Published: 2025-04-03T01:40:12.164Z
Updated: 2026-06-30T03:15:48.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9675 |
vulnerable | 2026-06-08 07:00:28.490228 |
Buildah: buildah allows arbitrary directory mount
HIGH (7.8)
A vulnerability was found in Buildah. Cache mounts do not properly validate that user-specified paths for the cache are within our cache directory, allowing a `RUN` instruction in a Container file to mount an arbitrary directory from the host (read/write) into the container as long as those files can be accessed by the user running Buildah.
Published: 2024-10-09T14:32:11.922Z
Updated: 2026-06-29T20:27:04.452Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12085 |
vulnerable | 2026-06-08 06:23:51.212579 |
Rsync: info leak via uninitialized stack contents
HIGH (7.5)
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Published: 2025-01-14T17:37:16.036Z
Updated: 2026-07-26T12:59:49.331Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5455 |
vulnerable | 2026-06-08 06:19:43.770695 |
Ipa: invalid csrf protection
MEDIUM (6.5)
A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
Published: 2024-01-10T12:33:00.336Z
Updated: 2026-03-18T02:31:15.798Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4911 |
vulnerable | 2026-06-08 06:16:14.890656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3758 |
vulnerable | 2026-06-08 06:09:40.493463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.