Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Jboss Keycloak
MEDIUM 6.1
JBoss KeyCloak: XSS in login-status-iframe.html
Openstack
HIGH 7.5
openstack-utils openstack-db has insecure password creation
Keycloak
CRITICAL 9.8
A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDA…
Openshift
MEDIUM 5.5
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS
Keycloak
HIGH 8.3
A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will…
Openshift
HIGH 8.1
OpenShift cartridge allows remote URL retrieval
Satellite
MEDIUM 5.4
Katello has multiple XSS issues in various entities
Ansible Tower
HIGH 8.4
A vulnerability was found in Ansible Tower before 3.6.1 where an attacker with low privilege could retrieve usernames and passwords credentials from …
Jboss Application Server
MEDIUM 6.5
A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for …
Jboss Application Server
MEDIUM 5.4
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could…
Enterprise Linux Openstack Platform
MEDIUM 6.5
Designate does not enforce the DNS protocol limit concerning record set sizes
Redhat Upgrade Tool
CRITICAL 9.8
redhat-upgrade-tool: Does not check GPG signatures when upgrading versions
Ovirt Engine
MEDIUM 6.5
oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center
Cloudforms Management Engine
MEDIUM 5.4
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure m…
Enterprise Mrg
CRITICAL 9.8
cumin: At installation postgresql database user created without password
Tuned
MEDIUM 5.5
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
Openshift
HIGH 7.8
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution
Enterprise Virtualization
MEDIUM 5.9
vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
Enterprise Linux
MEDIUM 6.5
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations,…
Openstack Mistral
MEDIUM 5.5
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world…
Enterprise Linux
MEDIUM 5.5
The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace.
Virtual Desktop Server Manager
MEDIUM 5.5
Insecure temporary file vulnerability in RedHat vsdm 4.9.6.
Cloudforms
MEDIUM 5.5
CloudForms stores user passwords in recoverable format
Update Infrastructure
MEDIUM 5.5
RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates
Enterprise Linux
HIGH 7.5
There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in …
Openshift
HIGH 7.3
cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.
Cloudforms
MEDIUM 6.1
Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified ve…
Openstack
MEDIUM 5.9
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL cert…
Jboss Enterprise Application Platform
CRITICAL 9.8
A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525…
Openshift Container Platform
MEDIUM 5.4
A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found …