Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Build Of Quarkus
MEDIUM 6.1
It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cro…
Enterprise Linux
HIGH 7.8
An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially…
Openshift
HIGH 8.1
It was found that the original fix for log4j CVE-2021-44228 and CVE-2021-45046 in the OpenShift metering hive containers was incomplete, as not all J…
Ansible Runner
HIGH 7.8
A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interface.run_command, can lead to pa…
Enterprise Linux
HIGH 7.5
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the se…
Fabric8 Kubernetes
MEDIUM 6.7
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configure…
Enterprise Linux
MEDIUM 6.5
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause …
Enterprise Linux
MEDIUM 6.0
A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the Q…
Amq Broker
MEDIUM 5.3
A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. T…
Libvirt
MEDIUM 6.5
A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads with…
Coreos Installer
MEDIUM 5.5
A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw …
Enterprise Linux Fast Datapath
HIGH 7.5
A memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An attacker could use this flaw to potentially exhaust av…
Keycloak
MEDIUM 6.8
A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an at…
Fuse
HIGH 7.5
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cau…
Ansible Runner
MEDIUM 6.6
A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw all…
Storage
MEDIUM 6.5
MaxQueryDuration not honoured in Samba AD DC LDAP
Ansible Runner
MEDIUM 6.3
A race condition flaw was found in ansible-runner, where an attacker could watch for rapid creation and deletion of a temporary directory, substitute…
Keycloak
MEDIUM 5.4
A flaw was found in keycloak affecting versions 11.0.3 and 12.0.0. An expired certificate would be accepted by the direct-grant authenticator because…
Openshift Service Mesh
CRITICAL 9.8
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allo…
Satellite
HIGH 8.8
A flaw was found in Foreman project. A credential leak was identified which will expose Azure Compute Profile password through JSON of the API output…
Keycloak
HIGH 7.5
A flaw was found in keycloak where a brute force attack is possible even when the permanent lockout feature is enabled. This is due to a wrong error …
Openshift Api Management
MEDIUM 5.4
A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into s…
Openshift Container Platform
CRITICAL 9.8
A flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker…
Ansible Automation Platform
MEDIUM 6.5
A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions…
Jboss A Mq
MEDIUM 5.6
A flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's configuration files, leading to denial of service and info…
Process Automation Manager
CRITICAL 9.8
A flaw was found in Red Hat Process Automation Manager 7 where an attacker can benefit from a brute force attack against Administration Console as th…
Process Automation Manager
HIGH 8.2
XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. This attack …
Keycloak
HIGH 7.2
An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the UPLOAD_SCRIPTS feature i…
Integration Camel K
HIGH 7.5
When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementat…
Enterprise Linux
HIGH 7.5
A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_p…