Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Certification
HIGH 7.5
It was discovered that the /configuration view of redhat-certification 7 does not perform an authorization check and it allows an unauthenticated use…
Certification
HIGH 7.5
redhat-certification 7 does not properly restrict the number of recursive definitions of entities in XML documents, allowing an unauthenticated user …
Ansible
MEDIUM 5.5
A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using…
3scale
HIGH 8.8
A vulnerability was found that the 3scale dev portal does not employ mechanisms for protection against login CSRF. An attacker could use this flaw to…
Libvirt
MEDIUM 6.5
A flaw was found in libvirt in the virConnectListAllNodeDevices API in versions before 7.0.0. It only affects hosts with a PCI device and driver that…
Enterprise Linux
CRITICAL 9.8
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
Enterprise Linux
CRITICAL 9.8
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
Enterprise Linux
CRITICAL 9.8
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check …
Enterprise Linux
CRITICAL 9.8
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this…
Enterprise Linux
CRITICAL 9.1
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
Enterprise Linux
CRITICAL 9.1
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
Enterprise Linux
CRITICAL 9.1
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
Enterprise Linux
CRITICAL 9.1
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
Enterprise Linux
CRITICAL 9.1
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulne…
Enterprise Linux
HIGH 7.5
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from th…
Jboss Core Services
HIGH 8.6
There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be…
Enterprise Linux
MEDIUM 5.5
A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiab…
Ceph
MEDIUM 5.3
A flaw was found in the Red Hat Ceph Storage RGW in versions before 14.2.21. When processing a GET Request for a swift URL that ends with two slashes…
Ceph
MEDIUM 6.5
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway) in versions before 14.2.21. The vulnerability is related to the injection …
Openshift Container Platform
HIGH 7.1
A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw c…
Jboss Core Services
MEDIUM 5.9
A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL der…
Enterprise Linux
MEDIUM 6.0
An out-of-bounds heap buffer access issue was found in the ARM Generic Interrupt Controller emulator of QEMU up to and including qemu 4.2.0on aarch64…
Noobaa Operator
HIGH 8.8
A flaw was found in noobaa-operator in versions before 5.7.0, where internal RPC AuthTokens between the noobaa operator and the noobaa core are leake…
Enterprise Linux
MEDIUM 5.5
A flaw was found in OpenJPEG’s encoder in the opj_dwt_calc_explicit_stepsizes() function. This flaw allows an attacker who can supply crafted input t…
Keycloak
HIGH 7.3
A flaw was found in keycloak. Directories can be created prior to the Java process creating them in the temporary directory, but with wider user perm…
Hivex
MEDIUM 5.4
A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attack…
Openstack
HIGH 7.5
A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update a…
Ansible Engine
HIGH 7.5
A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using th…
Enterprise Linux
MEDIUM 6.1
A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credent…
Enterprise Linux
MEDIUM 5.5
A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG …