Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-23368 | 8.1 | A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI. | 2026-09-14 22:16:55 | 2025-03-04 16:15:39 |
| CVE-2025-23367 | 6.5 | A flaw was found in the Wildfly Server Role Based Access Control (RBAC) provider. When authorization to control management operations is secured using the Role Based Access Control provider, a user without the required privileges can suspend or resum | 2026-09-14 15:17:03 | 2025-01-30 15:15:18 |
| CVE-2026-9800 | 8.1 | A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access (UMA) permission checks. By including the configured access-denied pag | 2026-09-14 13:19:33 | 2026-06-25 17:17:04 |
| CVE-2026-42055 | 8.1 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, the ignore_in | 2026-09-14 13:18:34 | 2026-06-17 15:16:50 |
| CVE-2026-3009 | 8.1 | A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been disabled by an administrator. An attacker who knows the IdP alias can reuse a prev | 2026-09-14 13:18:31 | 2026-03-05 19:16:18 |
| CVE-2022-24958 | 4.6 | drivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release. | 2026-09-11 16:17:32 | 2022-02-11 06:15:06 |
| CVE-2026-44495 | 7.0 | Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same JavaScript process has already po | 2026-09-11 13:18:08 | 2026-06-11 17:16:33 |
| CVE-2026-4897 | 5.5 | A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the `polkit-agent-helper-1` setuid binary via standard input (stdin). This unbounded input can lead to an out-of-memory (OOM) condit | 2026-09-10 18:18:01 | 2026-03-26 15:16:43 |
| CVE-2026-46579 | 7.4 | A flaw was found in the OpenShift Router. When a Route has `insecureEdgeTerminationPolicy` set to Allow, the HTTP frontend does not remove `X-SSL-Client-*` headers from incoming requests. This allows an unauthenticated attacker to send plain HTTP req | 2026-09-10 13:20:19 | 2026-05-29 11:16:17 |
| CVE-2026-32589 | 7.4 | A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have | 2026-09-10 13:18:10 | 2026-04-08 18:25:59 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: