Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Enterprise Linux Server
HIGH 7.5
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing t…
Openstack Platform
MEDIUM 6.6
A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be rev…
Advanced Cluster Management For Kubernetes
MEDIUM 6.5
A vulnerability was found in the search-api container in Red Hat Advanced Cluster Management for Kubernetes when a query in the search filter gets pa…
Openshift
MEDIUM 6.5
A credentials leak was found in the OpenShift Container Platform. The private key for the external cluster certificate was stored incorrectly in the …
Openshift Container Platform
MEDIUM 6.3
In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of th…
Enterprise Linux Server
MEDIUM 5.3
The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing t…
Ansible Automation Platform
MEDIUM 6.5
An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serv…
Jboss Data Grid
HIGH 8.8
An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a…
Build Of Quarkus
HIGH 7.5
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of servic…
Openshift Application Runtimes
HIGH 7.5
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set ev…
Enterprise Linux
HIGH 7.5
A single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an attacker who sends a crafted packet processed by dns…
Enterprise Linux
MEDIUM 5.5
There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow una…
Enterprise Linux
HIGH 7.8
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local…
Openshift Container Platform
MEDIUM 6.5
A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_IN…
Enterprise Linux
MEDIUM 5.5
There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription…
Enterprise Linux
MEDIUM 6.7
A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot pro…
Enterprise Linux
MEDIUM 6.7
A flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot prote…
Enterprise Linux
MEDIUM 6.7
A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In …
Integration Camel K
HIGH 7.5
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. …
Enterprise Linux
MEDIUM 5.5
A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed mem…
Keycloak
MEDIUM 5.4
A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new group from t…
Keycloak
HIGH 7.5
A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already registered…
Openshift Serverless
HIGH 7.5
It was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly mentioned as fixed in RHSA for Serverless 1.16.0 and Se…
Jboss Enterprise Application Platform
HIGH 7.5
A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carr…
Keycloak
MEDIUM 5.3
A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user. This may caus…
Satellite
HIGH 8.1
A flaw was found in satellite. When giving granular permission related to the organization, other permissions allowing a user to view and manage othe…
Enterprise Linux
MEDIUM 6.7
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to …
Ansible Automation Platform Early Access
HIGH 8.8
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the p…
Ceph Storage
MEDIUM 6.5
A key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the key length is incorrectly passed in an encryption algo…
Enterprise Linux
MEDIUM 6.4
A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response …