Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Jboss Portal
MEDIUM 5.9
It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, und…
Jboss Enterprise Application Platform
MEDIUM 6.5
In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the security domain. This could all…
Quay
MEDIUM 6.3
A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database queries in the Red Hat Quay …
Ansible
MEDIUM 6.5
Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True w…
Decision Manager
MEDIUM 6.1
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers…
Decision Manager
MEDIUM 6.1
There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web application, the web application de…
Jboss Data Grid
CRITICAL 9.8
A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in the Spring Session inte…
Ceph Storage
CRITICAL 9.1
A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this ver…
Mrg Management Console
HIGH 7.5
An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary …
Openshift
MEDIUM 6.5
A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection me…
Openstack
MEDIUM 5.5
The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-django-horizon package before 2…
Ceph Storage
MEDIUM 6.5
A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An authenticated attacker can abuse …
Enterprise Linux
HIGH 7.8
A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS use…
Enterprise Linux
HIGH 7.1
An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS users to cause a den…
Enterprise Linux
MEDIUM 5.5
A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS use…
Jboss Fuse
MEDIUM 6.1
swagger-ui has XSS in key names
Ansible Tower
MEDIUM 5.5
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both …
Ansible Tower
MEDIUM 5.3
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and the password contains the '#'…
Ansible Tower
HIGH 8.2
A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager by setting it with '-e rabbitm…
Jboss Application Server
HIGH 7.8
An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat …
Edeploy
CRITICAL 9.8
eDeploy has RCE via cPickle deserialization of untrusted data
Edeploy
HIGH 8.1
eDeploy has tmp file race condition flaws
Keycloak
MEDIUM 6.1
JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.
Cloudforms Management Engine
MEDIUM 5.5
CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration
Satellite
MEDIUM 5.5
rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable
Openshift
CRITICAL 9.8
mcollective has a default password set at install
Cloudforms
HIGH 8.8
CFME: CSRF protection vulnerability via permissive check of the referrer header
Enterprise Linux
MEDIUM 6.5
Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It is possible for packages to create symlinks to files outside of…
3scale
MEDIUM 5.4
A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to …
Openshift
HIGH 8.8
Openshift has shell command injection flaws due to unsanitized data being passed into shell commands.