Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Pen Drive
MEDIUM 6.9
A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An at…
Build Of Keycloak
HIGH 7.3
A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to clien…
Advanced Cluster Security
MEDIUM 5.4
A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells. T…
Codeready Studio
MEDIUM 6.1
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, w…
Build Of Keycloak
HIGH 7.3
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or…
Ansible Automation Platform
MEDIUM 6.1
A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw allows a malicious us…
Single Sign On
MEDIUM 5.4
A flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could al…
Enterprise Linux
MEDIUM 5.4
A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the…
Ansible Automation Controller
MEDIUM 5.4
An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a cust…
Keycloak
MEDIUM 6.1
A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a m…
Satellite
MEDIUM 5.4
A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As…
Quay
MEDIUM 5.4
A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex …
Keycloak
MEDIUM 6.1
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The v…
Keycloak
MEDIUM 5.4
A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak user…
Build Of Quarkus
MEDIUM 6.1
If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Info…
Bodhi
MEDIUM 6.1
Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1.
Ansible Automation Platform
MEDIUM 6.1
Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS inje…
Keycloak
MEDIUM 5.4
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from t…
Build Of Quarkus
MEDIUM 6.1
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cro…
Jboss Aerogear
MEDIUM 5.4
Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could us…
Keycloak
MEDIUM 6.1
A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.
Resteasy
MEDIUM 6.1
A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL…
Noobaa Operator
HIGH 7.1
A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as p…
Fuse
MEDIUM 6.1
A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL …
Quay
CRITICAL 9.0
A flaw was found in Red Hat Quay, where it has a persistent Cross-site Scripting (XSS) vulnerability when displaying a repository's notification. Thi…
Ceph Storage
MEDIUM 6.1
A flaw was found in Red Hat Ceph Storage 4, in the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to a…
Keycloak
HIGH 7.5
A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat …
Software Collections
MEDIUM 6.1
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behavi…
Ceph Storage
MEDIUM 6.1
A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails…
Pagure
MEDIUM 6.1
Pagure before 5.6 allows XSS via the templates/blame.html blame view.