{"vulnerability": "RHSA-2023:", "sightings": [{"uuid": "3f40e889-1521-4c7a-88e0-b7f4d457103e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:5244", "type": "seen", "source": "https://gist.github.com/ronlavi2412/47a41f60b92014cab804b1851d90c31a", "content": "", "creation_timestamp": "2025-09-30T13:32:38.000000Z"}, {"uuid": "249ce4e8-6e0f-4862-8c49-b7842b665fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:5455", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4813\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.\n\ud83d\udccf Published: 2023-09-12T21:54:33.387Z\n\ud83d\udccf Modified: 2025-04-30T19:58:08.516Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4813\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237798", "creation_timestamp": "2025-04-30T20:14:27.000000Z"}, {"uuid": "d93493ba-7146-4b23-9a72-e6dfa9fd424b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4806\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.\n\ud83d\udccf Published: 2023-09-18T16:33:57.211Z\n\ud83d\udccf Modified: 2025-04-30T19:57:53.420Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4806\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237782", "creation_timestamp": "2025-04-30T20:14:28.000000Z"}, {"uuid": "3deca8a3-ea91-4043-9e57-b08de1409f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:5455", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4806\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.\n\ud83d\udccf Published: 2023-09-18T16:33:57.211Z\n\ud83d\udccf Modified: 2025-04-30T19:57:53.420Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4806\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237782", "creation_timestamp": "2025-04-30T20:14:28.000000Z"}, {"uuid": "d266c25d-8a3e-4e07-8f3d-eb8a11c98cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:5453", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4806\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.\n\ud83d\udccf Published: 2023-09-18T16:33:57.211Z\n\ud83d\udccf Modified: 2025-04-30T19:57:53.420Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4806\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237782", "creation_timestamp": "2025-04-30T20:14:28.000000Z"}, {"uuid": "662e7258-2b44-4d19-a702-28a9dfd2b571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4813\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.\n\ud83d\udccf Published: 2023-09-12T21:54:33.387Z\n\ud83d\udccf Modified: 2025-04-30T19:58:08.516Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4813\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237798", "creation_timestamp": "2025-04-30T20:14:27.000000Z"}, {"uuid": "b710d589-e6e2-44f3-a144-bdf21e1481a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:5453", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4813\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/nsswitch.conf is configured with SUCCESS=continue or SUCCESS=merge.\n\ud83d\udccf Published: 2023-09-12T21:54:33.387Z\n\ud83d\udccf Modified: 2025-04-30T19:58:08.516Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHBA-2024:2413\n2. https://access.redhat.com/errata/RHSA-2023:5453\n3. https://access.redhat.com/errata/RHSA-2023:5455\n4. https://access.redhat.com/errata/RHSA-2023:7409\n5. https://access.redhat.com/security/cve/CVE-2023-4813\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2237798", "creation_timestamp": "2025-04-30T20:14:27.000000Z"}, {"uuid": "a4039e2a-1e26-4fd2-bf6e-2d221b09eb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7855", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7651", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6563\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the \"consents\" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.\n\ud83d\udccf Published: 2023-12-14T18:01:26.005Z\n\ud83d\udccf Modified: 2025-03-15T03:33:57.850Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/security/cve/CVE-2023-6563\n7. https://bugzilla.redhat.com/show_bug.cgi?id=2253308\n8. https://github.com/keycloak/keycloak/issues/13340", "creation_timestamp": "2025-03-15T03:48:56.000000Z"}, {"uuid": "4f4569d8-539e-420d-b55a-42e621922533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7651", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6563\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the \"consents\" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.\n\ud83d\udccf Published: 2023-12-14T18:01:26.005Z\n\ud83d\udccf Modified: 2025-03-15T03:33:57.850Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/security/cve/CVE-2023-6563\n7. https://bugzilla.redhat.com/show_bug.cgi?id=2253308\n8. https://github.com/keycloak/keycloak/issues/13340", "creation_timestamp": "2025-03-15T03:48:56.000000Z"}, {"uuid": "1887a731-6d61-4df8-b4ca-96daba28a8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7854", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7651", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6563\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the \"consents\" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.\n\ud83d\udccf Published: 2023-12-14T18:01:26.005Z\n\ud83d\udccf Modified: 2025-03-15T03:33:57.850Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/security/cve/CVE-2023-6563\n7. https://bugzilla.redhat.com/show_bug.cgi?id=2253308\n8. https://github.com/keycloak/keycloak/issues/13340", "creation_timestamp": "2025-03-15T03:48:56.000000Z"}, {"uuid": "f30e03bb-173b-4543-9eda-2d2e5c1e4801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7858", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7651", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6563\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the \"consents\" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.\n\ud83d\udccf Published: 2023-12-14T18:01:26.005Z\n\ud83d\udccf Modified: 2025-03-15T03:33:57.850Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/security/cve/CVE-2023-6563\n7. https://bugzilla.redhat.com/show_bug.cgi?id=2253308\n8. https://github.com/keycloak/keycloak/issues/13340", "creation_timestamp": "2025-03-15T03:48:56.000000Z"}, {"uuid": "9f318fe5-5f62-415c-8f4b-110f496c9950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7856", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7651", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6563\n\ud83d\udd25 CVSS Score: 7.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (> 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the \"consents\" tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.\n\ud83d\udccf Published: 2023-12-14T18:01:26.005Z\n\ud83d\udccf Modified: 2025-03-15T03:33:57.850Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/security/cve/CVE-2023-6563\n7. https://bugzilla.redhat.com/show_bug.cgi?id=2253308\n8. https://github.com/keycloak/keycloak/issues/13340", "creation_timestamp": "2025-03-15T03:48:56.000000Z"}, {"uuid": "c8d78f1f-8d4c-4291-b22a-0a492c2d9374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7860", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6291\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.\n\ud83d\udccf Published: 2024-01-26T14:23:43.185Z\n\ud83d\udccf Modified: 2025-04-03T02:35:28.214Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/errata/RHSA-2023:7860\n7. https://access.redhat.com/errata/RHSA-2023:7861\n8. https://access.redhat.com/errata/RHSA-2024:0798\n9. https://access.redhat.com/errata/RHSA-2024:0799\n10. https://access.redhat.com/errata/RHSA-2024:0800\n11. https://access.redhat.com/errata/RHSA-2024:0801\n12. https://access.redhat.com/errata/RHSA-2024:0804\n13. https://access.redhat.com/security/cve/CVE-2023-6291\n14. https://bugzilla.redhat.com/show_bug.cgi?id=2251407", "creation_timestamp": "2025-04-03T03:33:49.000000Z"}, {"uuid": "2180cac0-3290-48ba-8950-4bb54aa60ea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7855", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6291\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.\n\ud83d\udccf Published: 2024-01-26T14:23:43.185Z\n\ud83d\udccf Modified: 2025-04-03T02:35:28.214Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/errata/RHSA-2023:7860\n7. https://access.redhat.com/errata/RHSA-2023:7861\n8. https://access.redhat.com/errata/RHSA-2024:0798\n9. https://access.redhat.com/errata/RHSA-2024:0799\n10. https://access.redhat.com/errata/RHSA-2024:0800\n11. https://access.redhat.com/errata/RHSA-2024:0801\n12. https://access.redhat.com/errata/RHSA-2024:0804\n13. https://access.redhat.com/security/cve/CVE-2023-6291\n14. https://bugzilla.redhat.com/show_bug.cgi?id=2251407", "creation_timestamp": "2025-04-03T03:33:49.000000Z"}, {"uuid": "b1fdebf4-7a9b-4888-9c80-75d64ad327dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7861", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6291\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.\n\ud83d\udccf Published: 2024-01-26T14:23:43.185Z\n\ud83d\udccf Modified: 2025-04-03T02:35:28.214Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/errata/RHSA-2023:7860\n7. https://access.redhat.com/errata/RHSA-2023:7861\n8. https://access.redhat.com/errata/RHSA-2024:0798\n9. https://access.redhat.com/errata/RHSA-2024:0799\n10. https://access.redhat.com/errata/RHSA-2024:0800\n11. https://access.redhat.com/errata/RHSA-2024:0801\n12. https://access.redhat.com/errata/RHSA-2024:0804\n13. https://access.redhat.com/security/cve/CVE-2023-6291\n14. https://bugzilla.redhat.com/show_bug.cgi?id=2251407", "creation_timestamp": "2025-04-03T03:33:49.000000Z"}, {"uuid": "51182f48-6ffb-4630-a356-22e50f5e71cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6291\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.\n\ud83d\udccf Published: 2024-01-26T14:23:43.185Z\n\ud83d\udccf Modified: 2025-04-03T02:35:28.214Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/errata/RHSA-2023:7860\n7. https://access.redhat.com/errata/RHSA-2023:7861\n8. https://access.redhat.com/errata/RHSA-2024:0798\n9. https://access.redhat.com/errata/RHSA-2024:0799\n10. https://access.redhat.com/errata/RHSA-2024:0800\n11. https://access.redhat.com/errata/RHSA-2024:0801\n12. https://access.redhat.com/errata/RHSA-2024:0804\n13. https://access.redhat.com/security/cve/CVE-2023-6291\n14. https://bugzilla.redhat.com/show_bug.cgi?id=2251407", "creation_timestamp": "2025-04-03T03:33:49.000000Z"}, {"uuid": "84269f36-0515-4065-b6dc-b908c7452d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7854", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6291\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.\n\ud83d\udccf Published: 2024-01-26T14:23:43.185Z\n\ud83d\udccf Modified: 2025-04-03T02:35:28.214Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/errata/RHSA-2023:7860\n7. https://access.redhat.com/errata/RHSA-2023:7861\n8. https://access.redhat.com/errata/RHSA-2024:0798\n9. https://access.redhat.com/errata/RHSA-2024:0799\n10. https://access.redhat.com/errata/RHSA-2024:0800\n11. https://access.redhat.com/errata/RHSA-2024:0801\n12. https://access.redhat.com/errata/RHSA-2024:0804\n13. https://access.redhat.com/security/cve/CVE-2023-6291\n14. https://bugzilla.redhat.com/show_bug.cgi?id=2251407", "creation_timestamp": "2025-04-03T03:33:49.000000Z"}, {"uuid": "aa712033-69fa-42bc-be95-e3a8573042c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7858", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6291\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.\n\ud83d\udccf Published: 2024-01-26T14:23:43.185Z\n\ud83d\udccf Modified: 2025-04-03T02:35:28.214Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/errata/RHSA-2023:7860\n7. https://access.redhat.com/errata/RHSA-2023:7861\n8. https://access.redhat.com/errata/RHSA-2024:0798\n9. https://access.redhat.com/errata/RHSA-2024:0799\n10. https://access.redhat.com/errata/RHSA-2024:0800\n11. https://access.redhat.com/errata/RHSA-2024:0801\n12. https://access.redhat.com/errata/RHSA-2024:0804\n13. https://access.redhat.com/security/cve/CVE-2023-6291\n14. https://bugzilla.redhat.com/show_bug.cgi?id=2251407", "creation_timestamp": "2025-04-03T03:33:49.000000Z"}, {"uuid": "232f0499-5ead-42be-ae21-436f987ab7ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7856", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-6291\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.\n\ud83d\udccf Published: 2024-01-26T14:23:43.185Z\n\ud83d\udccf Modified: 2025-04-03T02:35:28.214Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7854\n2. https://access.redhat.com/errata/RHSA-2023:7855\n3. https://access.redhat.com/errata/RHSA-2023:7856\n4. https://access.redhat.com/errata/RHSA-2023:7857\n5. https://access.redhat.com/errata/RHSA-2023:7858\n6. https://access.redhat.com/errata/RHSA-2023:7860\n7. https://access.redhat.com/errata/RHSA-2023:7861\n8. https://access.redhat.com/errata/RHSA-2024:0798\n9. https://access.redhat.com/errata/RHSA-2024:0799\n10. https://access.redhat.com/errata/RHSA-2024:0800\n11. https://access.redhat.com/errata/RHSA-2024:0801\n12. https://access.redhat.com/errata/RHSA-2024:0804\n13. https://access.redhat.com/security/cve/CVE-2023-6291\n14. https://bugzilla.redhat.com/show_bug.cgi?id=2251407", "creation_timestamp": "2025-04-03T03:33:49.000000Z"}, {"uuid": "53bbc617-7157-415b-bcb6-bc5da6071dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:6575", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3576\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A memory leak flaw was found in Libtiff's tiffcrop utility. This issue occurs when tiffcrop operates on a TIFF image file, allowing an attacker to pass a crafted TIFF image file to tiffcrop utility, which causes this memory leak issue, resulting an application crash, eventually leading to a denial of service.\n\ud83d\udccf Published: 2023-10-04T18:02:23.926Z\n\ud83d\udccf Modified: 2025-05-01T15:51:30.642Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:6575\n2. https://access.redhat.com/security/cve/CVE-2023-3576\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2219340", "creation_timestamp": "2025-05-01T16:14:40.000000Z"}, {"uuid": "ca1e67c0-6d42-4214-a1be-ac0ff28a6bc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:6583", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11782", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-3640\n\ud83d\udd25 CVSS Score: 7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implemented in /arch/x86/mm/cpu_entry_area.c, which works through the init_cea_offsets() function when KASLR is enabled. However, despite this feature, there is still a risk of per-cpu entry area leaks. This issue could allow a local user to gain access to some important data with memory in an expected location and potentially escalate their privileges on the system.\n\ud83d\udccf Published: 2023-07-24T15:19:29.983Z\n\ud83d\udccf Modified: 2025-04-15T11:40:03.124Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:6583\n2. https://access.redhat.com/security/cve/CVE-2023-3640\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2217523", "creation_timestamp": "2025-04-15T11:55:55.000000Z"}, {"uuid": "25f3c065-11dc-4172-816c-8a3c09928a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7112", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4641\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.\n\ud83d\udccf Published: 2023-12-27T15:43:22.929Z\n\ud83d\udccf Modified: 2025-04-17T20:33:22.477Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:6632\n2. https://access.redhat.com/errata/RHSA-2023:7112\n3. https://access.redhat.com/errata/RHSA-2024:0417\n4. https://access.redhat.com/errata/RHSA-2024:2577\n5. https://access.redhat.com/security/cve/CVE-2023-4641\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2215945", "creation_timestamp": "2025-04-17T20:58:04.000000Z"}, {"uuid": "2fdad7b2-b0c2-44f6-b89b-f7426bfe2e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:6632", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4641\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.\n\ud83d\udccf Published: 2023-12-27T15:43:22.929Z\n\ud83d\udccf Modified: 2025-04-17T20:33:22.477Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:6632\n2. https://access.redhat.com/errata/RHSA-2023:7112\n3. https://access.redhat.com/errata/RHSA-2024:0417\n4. https://access.redhat.com/errata/RHSA-2024:2577\n5. https://access.redhat.com/security/cve/CVE-2023-4641\n6. https://bugzilla.redhat.com/show_bug.cgi?id=2215945", "creation_timestamp": "2025-04-17T20:58:04.000000Z"}, {"uuid": "57c17bc1-276d-4bb3-97b5-b74648e28279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:4720", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18752", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4065\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.\n\ud83d\udccf Published: 2023-09-26T13:25:23.092Z\n\ud83d\udccf Modified: 2025-06-18T14:17:32.635Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:4720\n2. https://access.redhat.com/security/cve/CVE-2023-4065\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2224630", "creation_timestamp": "2025-06-18T14:41:56.000000Z"}, {"uuid": "7fe0d9d2-633e-43fc-8213-5b69382e4916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:6821", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5157\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.\n\ud83d\udccf Published: 2023-09-26T13:25:24.082Z\n\ud83d\udccf Modified: 2025-06-18T14:15:05.632Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:5683\n2. https://access.redhat.com/errata/RHSA-2023:5684\n3. https://access.redhat.com/errata/RHSA-2023:6821\n4. https://access.redhat.com/errata/RHSA-2023:6822\n5. https://access.redhat.com/errata/RHSA-2023:6883\n6. https://access.redhat.com/errata/RHSA-2023:7633\n7. https://access.redhat.com/security/cve/CVE-2023-5157\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2240246", "creation_timestamp": "2025-06-18T14:41:57.000000Z"}, {"uuid": "203857db-b61e-4825-b334-c017a4fe2378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7633", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5157\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.\n\ud83d\udccf Published: 2023-09-26T13:25:24.082Z\n\ud83d\udccf Modified: 2025-06-18T14:15:05.632Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:5683\n2. https://access.redhat.com/errata/RHSA-2023:5684\n3. https://access.redhat.com/errata/RHSA-2023:6821\n4. https://access.redhat.com/errata/RHSA-2023:6822\n5. https://access.redhat.com/errata/RHSA-2023:6883\n6. https://access.redhat.com/errata/RHSA-2023:7633\n7. https://access.redhat.com/security/cve/CVE-2023-5157\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2240246", "creation_timestamp": "2025-06-18T14:41:57.000000Z"}, {"uuid": "714dddee-41d5-4160-9eb8-43196ebf2dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:5684", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5157\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.\n\ud83d\udccf Published: 2023-09-26T13:25:24.082Z\n\ud83d\udccf Modified: 2025-06-18T14:15:05.632Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:5683\n2. https://access.redhat.com/errata/RHSA-2023:5684\n3. https://access.redhat.com/errata/RHSA-2023:6821\n4. https://access.redhat.com/errata/RHSA-2023:6822\n5. https://access.redhat.com/errata/RHSA-2023:6883\n6. https://access.redhat.com/errata/RHSA-2023:7633\n7. https://access.redhat.com/security/cve/CVE-2023-5157\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2240246", "creation_timestamp": "2025-06-18T14:41:57.000000Z"}, {"uuid": "ca6e78a0-4e25-4037-845c-4f69dbaa74ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:5683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5157\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.\n\ud83d\udccf Published: 2023-09-26T13:25:24.082Z\n\ud83d\udccf Modified: 2025-06-18T14:15:05.632Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:5683\n2. https://access.redhat.com/errata/RHSA-2023:5684\n3. https://access.redhat.com/errata/RHSA-2023:6821\n4. https://access.redhat.com/errata/RHSA-2023:6822\n5. https://access.redhat.com/errata/RHSA-2023:6883\n6. https://access.redhat.com/errata/RHSA-2023:7633\n7. https://access.redhat.com/security/cve/CVE-2023-5157\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2240246", "creation_timestamp": "2025-06-18T14:41:57.000000Z"}, {"uuid": "388902ca-7e35-44c0-9959-f292a037021a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:6822", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5157\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.\n\ud83d\udccf Published: 2023-09-26T13:25:24.082Z\n\ud83d\udccf Modified: 2025-06-18T14:15:05.632Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:5683\n2. https://access.redhat.com/errata/RHSA-2023:5684\n3. https://access.redhat.com/errata/RHSA-2023:6821\n4. https://access.redhat.com/errata/RHSA-2023:6822\n5. https://access.redhat.com/errata/RHSA-2023:6883\n6. https://access.redhat.com/errata/RHSA-2023:7633\n7. https://access.redhat.com/security/cve/CVE-2023-5157\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2240246", "creation_timestamp": "2025-06-18T14:41:57.000000Z"}, {"uuid": "5c866870-ee4a-4724-9312-1c73b6ce487b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:6883", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5157\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.\n\ud83d\udccf Published: 2023-09-26T13:25:24.082Z\n\ud83d\udccf Modified: 2025-06-18T14:15:05.632Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:5683\n2. https://access.redhat.com/errata/RHSA-2023:5684\n3. https://access.redhat.com/errata/RHSA-2023:6821\n4. https://access.redhat.com/errata/RHSA-2023:6822\n5. https://access.redhat.com/errata/RHSA-2023:6883\n6. https://access.redhat.com/errata/RHSA-2023:7633\n7. https://access.redhat.com/security/cve/CVE-2023-5157\n8. https://bugzilla.redhat.com/show_bug.cgi?id=2240246", "creation_timestamp": "2025-06-18T14:41:57.000000Z"}, {"uuid": "62268122-9568-4bdd-a091-461c304fa9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7053", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/20026", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-4042\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.\n\ud83d\udccf Published: 2023-08-23T12:19:29.156Z\n\ud83d\udccf Modified: 2025-07-01T13:58:15.854Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2023:7053\n2. https://access.redhat.com/security/cve/CVE-2023-4042\n3. https://bugzilla.redhat.com/show_bug.cgi?id=1870257\n4. https://bugzilla.redhat.com/show_bug.cgi?id=2228151", "creation_timestamp": "2025-07-01T14:11:12.000000Z"}, {"uuid": "04963f03-5efd-4b8c-bd09-4fd8c6fd5eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:4650", "type": "seen", "source": "https://t.me/Cyber_Watch_insider/25", "content": "https://access.redhat.com/errata/RHSA-2023:4650", "creation_timestamp": "2023-08-15T03:29:35.000000Z"}, {"uuid": "afd411a6-ff40-4cbe-b21e-284705034ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:4650", "type": "seen", "source": "https://t.me/Cyber_Watch_insider/24", "content": "https://vulners.com/redhat/RHSA-2023:4650", "creation_timestamp": "2023-08-15T03:29:25.000000Z"}, {"uuid": "38254037-7e25-491b-9882-8abacb185a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7874", "type": "seen", "source": "https://t.me/ctinow/155754", "content": "https://ift.tt/Me8wLjZ\nRHSA-2023:7874: Important: gstreamer1-plugins-bad-free security update", "creation_timestamp": "2023-12-18T09:17:44.000000Z"}, {"uuid": "176b6ecf-4654-494b-8a27-c388e3c9e4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7875", "type": "seen", "source": "https://t.me/ctinow/155753", "content": "https://ift.tt/UhAluM0\nRHSA-2023:7875: Important: gstreamer1-plugins-bad-free security update", "creation_timestamp": "2023-12-18T09:17:43.000000Z"}, {"uuid": "662b14e7-ccd9-4f67-83ab-74194e513f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7878", "type": "seen", "source": "https://t.me/ctinow/155752", "content": "https://ift.tt/sN4cWab\nRHSA-2023:7878: Important: postgresql:10 security update", "creation_timestamp": "2023-12-18T09:17:42.000000Z"}, {"uuid": "3f0cc3ca-e707-474c-b796-826bc0657b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7883", "type": "seen", "source": "https://t.me/ctinow/156880", "content": "https://ift.tt/xZRvkms\nRHSA-2023:7883: Important: postgresql:15 security update", "creation_timestamp": "2023-12-20T11:18:03.000000Z"}, {"uuid": "34be35db-7ece-419a-abe6-50d90a306bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7886", "type": "seen", "source": "https://t.me/ctinow/157017", "content": "https://ift.tt/lGdWEI8\nRHSA-2023:7886: Important: tigervnc security update", "creation_timestamp": "2023-12-20T14:18:24.000000Z"}, {"uuid": "821423aa-7547-4742-8953-fbc1f6906851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7873", "type": "seen", "source": "https://t.me/ctinow/156329", "content": "https://ift.tt/WYztvAj\nRHSA-2023:7873: Important: gstreamer1-plugins-bad-free security update", "creation_timestamp": "2023-12-19T11:17:47.000000Z"}, {"uuid": "c87f84e8-5250-4cc6-8808-a3ea5d28373d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7885", "type": "seen", "source": "https://t.me/ctinow/156879", "content": "https://ift.tt/czNIb2K\nRHSA-2023:7885: Important: postgresql:15 security update", "creation_timestamp": "2023-12-20T11:18:01.000000Z"}, {"uuid": "5a5683e6-f0b4-4b42-b34e-e4892918f6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7872", "type": "seen", "source": "https://t.me/ctinow/155755", "content": "https://ift.tt/VW0D3s4\nRHSA-2023:7872: Important: gstreamer1-plugins-bad-free security update", "creation_timestamp": "2023-12-18T09:17:45.000000Z"}, {"uuid": "c31e89a7-819a-4ce3-be9b-4e3da761736f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7876", "type": "seen", "source": "https://t.me/ctinow/156328", "content": "https://ift.tt/NepImbQ\nRHSA-2023:7876: Moderate: opensc security update", "creation_timestamp": "2023-12-19T11:17:46.000000Z"}, {"uuid": "9a7bcb29-f35d-46cd-939c-b1a6e47a85ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7877", "type": "seen", "source": "https://t.me/ctinow/156327", "content": "https://ift.tt/NALDaeb\nRHSA-2023:7877: Low: openssl security update", "creation_timestamp": "2023-12-19T11:17:45.000000Z"}, {"uuid": "1bfa0293-6593-46e0-8e40-cc12cce50079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7879", "type": "seen", "source": "https://t.me/ctinow/155838", "content": "https://ift.tt/cdefmKg\nRHSA-2023:7879: Moderate: opensc security update", "creation_timestamp": "2023-12-18T12:17:33.000000Z"}, {"uuid": "a6b8471e-2e83-4dfc-a319-0720fd520f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7197", "type": "seen", "source": "https://t.me/ctinow/195728", "content": "https://ift.tt/z7vAYma\nRHSA-2023:7197: Critical: OpenShift Container Platform 4.15.0 security and extras update", "creation_timestamp": "2024-02-28T18:22:30.000000Z"}, {"uuid": "76be08ea-4bd7-48ae-bb7c-ce0c5b8bbd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7198", "type": "seen", "source": "https://t.me/ctinow/195727", "content": "https://ift.tt/2SoWxYt\nRHSA-2023:7198: Critical: OpenShift Container Platform 4.15.0 bug fix and security update", "creation_timestamp": "2024-02-28T18:22:29.000000Z"}, {"uuid": "a5d71297-3316-4dd1-a1ed-05aaf46821c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7201", "type": "seen", "source": "https://t.me/ctinow/195725", "content": "https://ift.tt/GulmzaY\nRHSA-2023:7201: Important: OpenShift Container Platform 4.15.0 packages and security update", "creation_timestamp": "2024-02-28T18:22:27.000000Z"}, {"uuid": "5c2989b8-47b4-46df-a339-9ee24e275281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7200", "type": "seen", "source": "https://t.me/ctinow/195726", "content": "https://ift.tt/Nt7PHi3\nRHSA-2023:7200: Important: OpenShift Container Platform 4.15.z security update", "creation_timestamp": "2024-02-28T18:22:28.000000Z"}, {"uuid": "5aceff9e-0836-44d9-bba8-ef2a0e7832a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7831", "type": "seen", "source": "https://t.me/ctinow/162780", "content": "https://ift.tt/2xf3c9e\nRHSA-2023:7831: Important: OpenShift Container Platform 4.14.7 bug fix and security update", "creation_timestamp": "2024-01-04T06:16:51.000000Z"}, {"uuid": "778a86b6-1740-40e0-994a-ecc357c7f9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:4509", "type": "seen", "source": "https://t.me/ctinow/162838", "content": "https://ift.tt/9fOLUyK\nCVE-2023-5379 | Undertow AJP Request denial of service (RHSA-2023:4509)", "creation_timestamp": "2024-01-04T08:41:36.000000Z"}, {"uuid": "c06927c6-9ff5-47c9-a82d-2cb1f53802b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7855", "type": "seen", "source": "https://t.me/ctinow/161894", "content": "https://ift.tt/nKLpOMQ\nRHSA-2023:7855: Important: Red Hat Single Sign-On 7.6.6 security update on RHEL 9", "creation_timestamp": "2024-01-02T17:17:27.000000Z"}, {"uuid": "bf1e9d18-83f8-4be3-a1d9-6de4f62e53e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7856", "type": "seen", "source": "https://t.me/ctinow/161893", "content": "https://ift.tt/xpaySHs\nRHSA-2023:7856: Important: Red Hat Single Sign-On 7.6.6 security update on RHEL 8", "creation_timestamp": "2024-01-02T17:17:25.000000Z"}, {"uuid": "4424906c-292e-473d-90b2-ab57ead4ae63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7612", "type": "seen", "source": "https://t.me/ctinow/161215", "content": "https://ift.tt/f9dcrRH\nCVE-2023-6394 | Red Hat Quarkus prior 3.6.0 Websocket incorrect behavior order (RHSA-2023:7612)", "creation_timestamp": "2024-01-01T07:56:35.000000Z"}, {"uuid": "c95e5396-5552-4abd-9b14-037646fd257a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7884", "type": "seen", "source": "https://t.me/ctinow/161895", "content": "https://ift.tt/gjR1CKY\nRHSA-2023:7884: Important: postgresql:15 security update", "creation_timestamp": "2024-01-02T17:17:28.000000Z"}, {"uuid": "a338fc63-0bb8-4240-929f-a5c41ecbe649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7854", "type": "seen", "source": "https://t.me/ctinow/161687", "content": "https://ift.tt/FPxqjaN\nCVE-2023-6134 | JBoss KeyCloak Incomplete Fix CVE-2020-10748 redirect_uri cross site scripting (RHSA-2023:7854)", "creation_timestamp": "2024-01-02T11:31:29.000000Z"}, {"uuid": "c630c1f1-f905-4fa8-9d41-a6a8df15bd97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7676", "type": "seen", "source": "https://t.me/ctinow/159078", "content": "https://ift.tt/ZYha8Wt\nCVE-2023-5384 | Infinispan Configuration information disclosure (RHSA-2023:7676)", "creation_timestamp": "2023-12-24T18:22:00.000000Z"}, {"uuid": "58b26f88-24a1-4cba-91c0-7dd3250d5022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7886", "type": "seen", "source": "https://t.me/ctinow/164051", "content": "https://ift.tt/ogRc9aL\nCVE-2023-6478 | X.org X11 Server prior 21.1.10 Request out-of-bounds (RHSA-2023:7886)", "creation_timestamp": "2024-01-07T03:36:28.000000Z"}, {"uuid": "03fddbb7-07b1-4075-a33b-dd7f0b51b8b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7886", "type": "seen", "source": "https://t.me/ctinow/164046", "content": "https://ift.tt/HuVCftZ\nCVE-2023-6377 | X.org X11 Server prior 21.1.10 XKB Button Action out-of-bounds write (RHSA-2023:7886)", "creation_timestamp": "2024-01-07T03:06:24.000000Z"}, {"uuid": "a3d8547f-e0a6-48a5-ada9-1d5ec9fe4eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7823", "type": "seen", "source": "https://t.me/ctinow/163072", "content": "https://ift.tt/U95720L\nRHSA-2023:7823: Important: OpenShift Container Platform 4.12.46 bug fix and security update", "creation_timestamp": "2024-01-04T16:16:24.000000Z"}, {"uuid": "4235f934-592f-4f17-9fd3-3f9620cbd0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "RHSA-2023:7827", "type": "seen", "source": "https://t.me/ctinow/163071", "content": "https://ift.tt/eEUumg9\nRHSA-2023:7827: Important: OpenShift Container Platform 4.13.z security update", "creation_timestamp": "2024-01-04T16:16:22.000000Z"}]}