Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Directory Server
MEDIUM 6.5
A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific ex…
Enterprise Linux
MEDIUM 6.8
A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within R…
Enterprise Linux
HIGH 8.1
A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key. This key is different for each new…
Satellite
MEDIUM 6.2
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the proce…
Mirror Registry
HIGH 8.8
A flaw was found when using mirror-registry to install Quay. It uses a default secret, which is stored in plain-text format in one of the configurati…
Mirror Registry
MEDIUM 6.5
A flaw was found when using mirror-registry to install Quay. It uses a default database secret key, which is stored in plain-text format in one of th…
Openstack Platform
MEDIUM 5.5
An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were impr…
Openshift Container Platform
MEDIUM 6.5
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated atta…
Keycloak
MEDIUM 5.3
A flaw was found in Keycloak. In certain conditions, this issue may allow a remote unauthenticated attacker to block other accounts from logging in.
Undertow
MEDIUM 5.3
A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP reques…
Codeready Linux Builder Eus
HIGH 7.5
A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages whe…
Jboss Enterprise Application Platform
HIGH 7.5
An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created …
Enterprise Linux
HIGH 7.5
A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which ma…
Enterprise Linux
MEDIUM 5.3
A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a…
Enterprise Linux
MEDIUM 5.9
A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant. This issue may result in th…
Enterprise Linux
MEDIUM 6.8
An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains…
Openshift Container Platform
HIGH 7.5
A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get a…
Jboss Enterprise Application Platform
HIGH 7.5
A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources…
Codeready Linux Builder
MEDIUM 5.5
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, …
Single Sign On
HIGH 8.1
Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client could abuse the missing validatio…
Keycloak
MEDIUM 6.1
A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM respo…
Ansible Automation Platform
MEDIUM 6.3
An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make …
Jboss Enterprise Application Platform
HIGH 7.5
A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error…
Enterprise Linux
MEDIUM 5.4
A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the…
Build Of Quarkus
MEDIUM 5.3
A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial…
Ansible Automation Platform
MEDIUM 6.5
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy …
3scale Api Management
MEDIUM 5.5
A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back button in the browser, the tokens…
Enterprise Linux
HIGH 7.5
Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to he…
Advanced Cluster Management For Kubernetes
HIGH 7.5
A flaw was found in OpenShift API, as admission checks do not enforce "custom-host" permissions. This issue could allow an attacker to violate the bo…
Openshift Container Platform
MEDIUM 5.3
A content spoofing flaw was found in OpenShift's OAuth endpoint. This flaw allows a remote, unauthenticated attacker to inject text into a webpage, e…