VulnSea

insights-proxy/insights-proxy-container-rhel9 vulnerabilities

CVEs whose affected-version data names the insights-proxy/insights-proxy-container-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

6 CVEsRSS

CVE-2025-7425High· 7.8PoC
1y ago

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the pro…

MidnightGNOME · libxml2EPSS 0.36%via NVD
CVE-2025-6020High· 7.8
1y ago

A flaw was found in linux-pam

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

TwilightRed Hat · linux-pamEPSS 0.46%via NVD
CVE-2025-49796Critical· 9.1
1y ago

A vulnerability was found in libxml2

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, res…

MidnightRed Hat · libxml2EPSS 1.6%via NVD
CVE-2025-49794Critical· 9.1
1y ago

A use-after-free vulnerability was found in libxml2

A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the <sch:name path="..."/> schema elements. This flaw allows a malicious actor to …

MidnightRed Hat · libxml2EPSS 0.83%via NVD
CVE-2025-5278Medium· 4.4
1y ago

A flaw was found in GNU Coreutils

A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory outside the allocated buffer if a user runs a crafted command using the traditional key fo…

SunlitRed Hat · coreutilsEPSS 0.29%via NVD
CVE-2025-4373Medium· 4.8
1y ago

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function

A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.

SunlitRed Hat · glibEPSS 0.53%via NVD
insights-proxy/insights-proxy-container-rhel9 vulnerabilities (CVEs) · VulnSea