Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Openshift Container Platform
CRITICAL 9.8
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check …
Openshift Container Platform
CRITICAL 9.0
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print…
Openshift Ai
HIGH 8.8
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints use…
Satellite
HIGH 8.8
A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with …
Satellite
CRITICAL 9.1
A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile comm…
Satellite
CRITICAL 9.1
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on …
Virtualization
HIGH 8.8
A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands. This fl…
Satellite
HIGH 7.2
A server side remote code execution vulnerability was found in Foreman project. A authenticated attacker could use Sendmail configuration options to …
Ansible
HIGH 7.3
A flaw was found in the solaris_zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name…
Cloudforms Management Engine
CRITICAL 9.1
A high severity vulnerability was found in all active versions of Red Hat CloudForms before 5.11.7.0. The out of band OS command injection vulnerabil…
Cloudforms Management Engine
HIGH 7.2
A flaw was found in the CloudForms management engine version 5.10 and CloudForms management version 5.11, which triggered remote code execution throu…
Ansible Engine
HIGH 7.4
A flaw was found in the pipe lookup plugin of ansible. Arbitrary commands can be run, when the pipe lookup plugin uses subprocess.Popen() with shell=…
Openshift
CRITICAL 9.8
The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URL of a req…
Openshift
HIGH 8.8
Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.
Enterprise Linux Desktop
HIGH 7.8
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSA…
Cloudforms
HIGH 7.8
CloudForms Management Engine (cfme) is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an…
Enterprise Linux
HIGH 8.8
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted r…
Linux
HIGH 10.0
Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (|) character in a filename that is retrieved by the client.
Linux
CRITICAL 9.8
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.