Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Ceph Storage
CRITICAL 9.1
A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file syste…
Openstack
MEDIUM 6.5
An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without …
Certificate System
MEDIUM 5.7
A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled.…
Enterprise Linux
MEDIUM 6.5
A vulnerability was found in libguestfs. This issue occurs while calculating the greatest possible number of matching keys in the get_keys() function…
Keycloak
CRITICAL 9.8
A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid ac…
Cloudforms Management Engine
CRITICAL 9.1
A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verification bypass in Red Hat Cloud…
Developer Tools
HIGH 7.0
A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to …
Jboss Aerogear
HIGH 7.5
The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is use…
Jboss Aerogear
MEDIUM 5.4
Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could us…
Openshift Origin Node Util
MEDIUM 5.5
It was reported that watchman in openshift node-utils creates /var/run/watchman.pid and /var/log/watchman.ouput with world writable permission.
Openshift
CRITICAL 9.1
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and i…
Amq Broker
HIGH 8.8
A flaw was found in AMQ Broker Operator 7.9.4 installed via UI using OperatorHub where a low-privilege user that has access to the namespace where th…
Enterprise Linux
HIGH 8.2
A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even tho…
Drools
CRITICAL 9.8
drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java. The Validator class is not used correctly, res…
389 Directory Server
HIGH 7.5
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progr…
Jboss Enterprise Application Platform
HIGH 7.8
A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER acces…
Fuse
MEDIUM 5.9
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The h…
Integration
MEDIUM 5.9
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a deni…
Ignition
MEDIUM 6.5
A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issu…
Enterprise Linux
CRITICAL 9.1
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. Th…
Enterprise Linux
MEDIUM 6.5
A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU pr…
Jboss Enterprise Application Platform
MEDIUM 5.3
This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a…
Enterprise Linux
HIGH 8.2
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO regi…
Enterprise Linux
HIGH 8.2
A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a smal…
Enterprise Linux
HIGH 8.2
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.he…
Apicast
HIGH 7.5
A flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified connections for reuse. This flaw allows an attacker t…
Keycloak
MEDIUM 6.5
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was po…
Ansible Automation Platform
MEDIUM 5.5
A flaw was found in Ansible Galaxy Collections. When collections are built manually, any files in the repository directory that are not explicitly ex…
Enterprise Linux
HIGH 7.8
An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code executi…
Openshift
HIGH 7.5
The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. This issue only aff…