Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Enterprise Linux
HIGH 8.5
A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfe…
Jboss Core Services
MEDIUM 6.5
A flaw was found in libxml2. Exponential entity expansion attack its possible bypassing all existing protection mechanisms and leading to denial of s…
Keycloak
HIGH 7.5
A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity …
Enterprise Linux
HIGH 8.8
A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote att…
Enterprise Linux
HIGH 7.1
A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a …
Enterprise Linux
MEDIUM 5.5
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an…
Resteasy
MEDIUM 6.1
A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL…
Enterprise Linux
MEDIUM 5.7
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
Cloudforms
HIGH 8.1
A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a…
Machine Config Operator
MEDIUM 6.5
A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container consumes a large amount of memo…
Openshift Virtualization
HIGH 7.0
An insecure modification vulnerability flaw was found in containers using nmstate/kubernetes-nmstate-handler. An attacker with access to the containe…
Openstack Selinux
MEDIUM 6.5
An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container from pri…
Wildfly
MEDIUM 5.4
A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest th…
Enterprise Linux
MEDIUM 5.9
A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowin…
Enterprise Linux
MEDIUM 5.5
A stack corruption bug was found in libtpms in versions before 0.7.2 and before 0.8.0 while decrypting data using RSA. This flaw could result in a SI…
Noobaa Operator
HIGH 7.1
A flaw was found in noobaa-core in versions before 5.7.0. This flaw results in the name of an arbitrarily URL being copied into an HTML document as p…
Openshift
HIGH 7.0
An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running co…
Jboss Remoting
MEDIUM 5.9
A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB…
3scale Api Management
MEDIUM 6.3
A flaw was found in the Red Hat 3scale API Management Platform, where member permissions for an API's admin portal were not properly enforced. This f…
Satellite
HIGH 7.5
An account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with proper authentication to the relevant external authen…
Satellite
MEDIUM 6.5
A credential leak vulnerability was found in Red Hat Satellite. This flaw exposes the compute resources credentials through VMs that are running on t…
Xnio
MEDIUM 5.9
A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection c…
Integration Camel K
HIGH 7.5
A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with…
Openshift Container Platform
MEDIUM 6.5
A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network packets. This flaw allows an atta…
Jboss Enterprise Application Platform
MEDIUM 5.5
It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous…
Satellite
MEDIUM 5.5
A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows…
Data Grid
HIGH 7.1
A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw…
Single Sign On
MEDIUM 5.3
A flaw was found in keycloak as shipped in Red Hat Single Sign-On 7.4 where IDN homograph attacks are possible. A malicious user can register himself…
Openshift Service Mesh
HIGH 8.8
An incorrect access control flaw was found in the kiali-operator in versions before 1.33.0 and before 1.24.7. This flaw allows an attacker with a bas…
3scale
HIGH 7.3
It was found that all versions of 3Scale developer portal lacked brute force protections. An attacker could use this gap to bypass login controls, an…