Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Ceph Storage
HIGH 7.2
An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitiz…
Enterprise Linux
MEDIUM 6.5
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetada…
Satellite
MEDIUM 6.3
A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Az…
Ansible
MEDIUM 5.5
A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nod…
Openshift Container Platform
MEDIUM 6.5
A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is u…
Enterprise Linux
HIGH 7.0
A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to instal…
Resteasy
MEDIUM 5.3
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception…
Enterprise Linux
MEDIUM 6.3
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When…
389 Directory Server
MEDIUM 5.3
When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an un…
Enterprise Linux
CRITICAL 9.8
A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attac…
Enterprise Linux
MEDIUM 5.5
A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A sp…
Enterprise Linux
MEDIUM 5.5
A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the …
Openshift Container Platform
HIGH 7.8
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hadoop as shipped in Red Hat Openshift 4. An attac…
Openshift Container Platform
HIGH 7.0
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/presto as shipped in Red Hat Openshift 4. An attac…
Openshift Container Platform
HIGH 7.0
An insecure modification vulnerability in the /etc/passwd file was found in the operator-framework/hive as shipped in Red Hat Openshift 4. An attacke…
Openshift
HIGH 7.8
An insecure modification vulnerability in the /etc/passwd file was found in the container operator-framework/operator-metering as shipped in Red Hat …
Openshift
HIGH 7.8
An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ansible-service-broker as shipped in Red Hat Openshift 4 an…
Enterprise Linux
MEDIUM 5.7
The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues pr…
Jboss Remoting
HIGH 7.5
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holdi…
Keycloak
HIGH 7.5
A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat …
Openshift Container Platform
HIGH 7.5
An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SM…
Openshift Container Platform
HIGH 7.2
A flaw was discovered in OpenShift Container Platform 4 where, by default, users with access to create pods also have the ability to schedule workloa…
Openshift
MEDIUM 6.3
A flaw was found in atomic-openshift of openshift-4.2 where the basic-user RABC role in OpenShift Container Platform doesn't sufficiently protect the…
3scale Api Management
HIGH 7.5
A flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could target traffic using this weaker protocol and break…
Openshift Container Platform
HIGH 7.5
A flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memory to be lost when allocating data to handle speci…
Openshift Builder
HIGH 8.8
A privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are automatically mounted into t…
Certification
MEDIUM 5.3
It has been discovered in redhat-certification that any unauthorized user may download any file under /var/www/rhcert, provided they know its name. R…
Kubernetes Client
HIGH 7.4
A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using …
Certificate System
HIGH 8.1
A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and …
Enterprise Linux
CRITICAL 9.8
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.