Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Ansible Automation Platform
MEDIUM 6.1
Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS inje…
Enterprise Linux Server
HIGH 7.5
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing t…
Openstack Platform
MEDIUM 6.6
A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be rev…
Advanced Cluster Management For Kubernetes
MEDIUM 6.5
A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets pa…
Enterprise Linux Server
MEDIUM 5.3
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing t…
Ansible Automation Platform
MEDIUM 6.5
An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serv…
Enterprise Linux
MEDIUM 5.5
There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription…
Keycloak
MEDIUM 5.4
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from t…
Keycloak
MEDIUM 5.3
A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may caus…
Satellite
HIGH 8.1
A flaw was found in satellite. When giving granular permission related to the organization, other permissions allowing a user to view and manage othe…
Ansible Automation Platform Early Access
HIGH 8.8
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the p…
Keycloak
MEDIUM 5.4
A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because…
Openshift Service Mesh
CRITICAL 9.8
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allo…
Satellite
HIGH 8.8
A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output…
Openshift Api Management
MEDIUM 5.4
A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into s…
Ansible Automation Platform
MEDIUM 6.5
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions…
Jboss A Mq
MEDIUM 5.6
A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and info…
Keycloak
HIGH 7.2
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature i…
Openstack
MEDIUM 6.5
An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without …
Enterprise Linux
MEDIUM 6.5
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function…
Cloudforms Management Engine
CRITICAL 9.1
A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat Cloud…
Developer Tools
HIGH 7.0
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to …
Jboss Aerogear
HIGH 7.5
The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is use…
Jboss Aerogear
MEDIUM 5.4
Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could us…
Openshift Origin Node Util
MEDIUM 5.5
It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission.
Amq Broker
HIGH 8.8
A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where th…
Enterprise Linux
HIGH 8.2
A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even tho…
Ansible Automation Platform
MEDIUM 5.5
A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly ex…
Enterprise Linux
HIGH 7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code executi…
Openshift
HIGH 7.5
The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. This issue only aff…