Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Jboss Application Server
MEDIUM 5.4
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could…
Ansible
MEDIUM 6.5
A flaw was found in ansible 2.8.0 before 2.8.4. Fields managing sensitive data should be set as such by no_log feature. Some of these fields in GCP m…
Openshift Container Platform
MEDIUM 6.5
OpenShift Container Platform, versions 4.1 and 4.2, does not sanitize secret data written to pod logs when the log level in a given operator is set t…
Enterprise Linux
HIGH 7.1
A flaw was discovered in ibus in versions before 1.5.22 that allows any unprivileged user to monitor and send method calls to the ibus bus of another…
Openshift Container Platform
MEDIUM 5.9
The containers/image library used by the container tools Podman, Buildah, and Skopeo in Red Hat Enterprise Linux version 8 and CRI-O in OpenShift Con…
Fuse
HIGH 8.8
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to in…
Enterprise Linux Openstack Platform
MEDIUM 6.5
Designate does not enforce the DNS protocol limit concerning record set sizes
Redhat Upgrade Tool
CRITICAL 9.8
redhat-upgrade-tool: Does not check GPG signatures when upgrading versions
Ovirt Engine
MEDIUM 6.5
oVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data-center
Ansible
MEDIUM 6.5
ansible-playbook -k and ansible cli tools, all versions 2.8.x before 2.8.4, all 2.7.x before 2.7.13 and all 2.6.x before 2.6.19, prompt passwords by …
Cloudforms Management Engine
MEDIUM 5.4
cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure m…
Edeploy
CRITICAL 9.8
eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data
Enterprise Mrg
CRITICAL 9.8
cumin: At installation postgresql database user created without password
Openshift Origin
MEDIUM 5.5
Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.…
Tuned
MEDIUM 5.5
tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes.
Enterprise Linux
HIGH 7.5
tog-Pegasus has a package hash collision DoS vulnerability
Enterprise Linux
MEDIUM 5.5
Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability
Jboss Enterprise Application Platform
HIGH 7.5
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects c…
Openshift
HIGH 7.8
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution
Enterprise Linux Server Aus
HIGH 7.8
Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families;…
Enterprise Linux Fast Datapath
HIGH 7.5
A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious…
Enterprise Virtualization
MEDIUM 5.9
vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
Openshift Origin
MEDIUM 6.1
OpenShift Origin: Improperly validated team names could allow stored XSS attacks
Jboss Business Rules Management System
MEDIUM 6.1
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.
Hornetq
MEDIUM 6.5
HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy
Enterprise Linux
CRITICAL 9.8
gdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables due to an input validation flaw
Ceph Storage
HIGH 7.5
A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph…
Enterprise Linux
MEDIUM 6.5
A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations,…
Fuse
MEDIUM 6.5
It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of prote…
Hibernate Validator
MEDIUM 6.1
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially mal…