Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Openstack
HIGH 8.8
A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functio…
Enterprise Linux
HIGH 7.1
When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed glyph's width and height is constrained within bi…
Openshift
HIGH 7.4
Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks.
Openshift
HIGH 8.1
A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw a…
Build Of Quarkus
CRITICAL 9.8
A vulnerability was found in quarkus. This security flaw happens in Dev UI Config Editor which is vulnerable to drive-by localhost attacks leading to…
Enterprise Linux
MEDIUM 5.1
A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists the …
Enterprise Linux
MEDIUM 5.5
An off-by-one Error issue was discovered in Systemd in format_timespan() function of time-util.c. An attacker could supply specific values for time a…
Fedora Coreos
MEDIUM 5.5
Fedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this feature is enabled, GRUB requires a password to access the…
Ansible
HIGH 7.5
A flaw was found in Ansible in the amazon.aws collection when using the tower_callback parameter from the amazon.aws.ec2_instance module. This flaw a…
Ansible Automation Platform
MEDIUM 5.5
The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the…
Virtualization
MEDIUM 6.5
A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using otapi-style. This flaw allows an attac…
3scale Api Management
HIGH 8.8
3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject s…
Openshift
HIGH 7.5
The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root …
Openshift
MEDIUM 5.5
In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users…
Decision Manager
HIGH 8.8
A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header. This flaw allows an attacker to …
Decision Manager
HIGH 7.5
A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete enabled which may lead to leak of credentials.
Directory Server
MEDIUM 6.5
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using…
Bodhi
MEDIUM 6.1
Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1.
Virtualization
HIGH 8.6
QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/bu…
Virtualization
MEDIUM 5.5
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to …
Satellite
MEDIUM 5.5
IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 b…
Ansible Automation Platform
MEDIUM 6.1
Cross site scripting in automation controller UI in Red Hat Ansible Automation Platform 1.2 and 2.0 where the project name is susceptible to XSS inje…
Wildfly
HIGH 7.5
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
Openshift Container Platform
HIGH 7.1
An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data …
Openshift Container Platform
HIGH 7.1
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data…
Enterprise Linux
HIGH 7.8
A stack-based buffer overflow flaw was found in the Fribidi package. This flaw allows an attacker to pass a specially crafted file to the Fribidi app…
Enterprise Linux
MEDIUM 5.5
A heap-based buffer overflow flaw was found in the Fribidi package and affects the fribidi_cap_rtl_to_unicode() function of the fribidi-char-sets-cap…
Enterprise Linux
MEDIUM 5.5
A segmentation fault (SEGV) flaw was found in the Fribidi package and affects the fribidi_remove_bidi_marks() function of the lib/fribidi.c file. Thi…
Openstack Platform
HIGH 8.1
An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, mo…
Advanced Cluster Security
HIGH 8.8
A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw …