Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Virtualization
MEDIUM 6.5
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email an…
Ceph
HIGH 7.1
User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open S…
Keycloak
MEDIUM 5.3
A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_u…
Enterprise Linux
HIGH 7.8
A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The …
Language Support For Java
HIGH 7.8
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
Enterprise Linux
HIGH 7.5
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated atta…
Wildfly
MEDIUM 5.9
A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the…
Ceph Storage
MEDIUM 5.5
A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any use…
Enterprise Linux
HIGH 7.5
sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of…
Enterprise Linux
HIGH 7.5
A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious…
Software Collections
MEDIUM 6.1
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behavi…
Libvirt
HIGH 8.8
A flaw was found in libvirt, where it leaked a file descriptor for `/dev/mapper/control` into the QEMU process. This file descriptor allows for privi…
Data Grid
MEDIUM 6.5
A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When …
Cloudforms
MEDIUM 6.3
This release fixes a Cross Site Request Forgery vulnerability was found in Red Hat CloudForms which forces end users to execute unwanted actions on a…
Enterprise Linux
MEDIUM 6.5
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves prot…
Enterprise Linux
HIGH 7.5
A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a specially crafted message that, wh…
Wildfly
MEDIUM 5.3
A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inser…
Gluster Block
MEDIUM 5.5
An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes …
Gluster Storage
MEDIUM 5.5
An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access t…
Ceph
HIGH 8.8
A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly a…
Keycloak
HIGH 8.1
It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, …
Openstack Platform
MEDIUM 5.9
It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt part…
Keycloak
HIGH 7.5
A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint…
Advanced Cluster Management For Kubernetes
MEDIUM 6.5
An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created f…
Enterprise Linux
HIGH 8.8
A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. …
Enterprise Linux
MEDIUM 6.5
A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of s…
Wildfly
MEDIUM 6.5
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connec…
Fabric8 Maven
HIGH 7.8
A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configur…
Enterprise Linux
HIGH 7.5
A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages,…
Jboss Enterprise Application Platform
MEDIUM 6.5
A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox Secur…