Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-2377 | 6.5 | A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this pro | 2026-09-10 13:18:04 | 2026-04-08 17:21:16 |
| CVE-2024-22373 | 8.1 | An out-of-bounds write vulnerability exists in the JPEG2000Codec::DecodeByStreamsCommon functionality of Mathieu Malaterre Grassroot DICOM 3.0.23. A specially crafted DICOM file can lead to a heap buffer overflow. An attacker can provide a malicious | 2026-09-10 06:17:01 | 2024-04-25 15:16:03 |
| CVE-2026-4740 | 8.2 | A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM). Improper validation of Kubernetes client certificate renewal allows a managed cluster administrator to forge a client certificate | 2026-09-07 19:17:26 | 2026-04-07 15:17:46 |
| CVE-2026-46625 | 7.5 | JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal assign() helper copies properties with for...in + plain assignment. When the source object is produced by JSON.parse, the JSON objec | 2026-09-07 13:20:13 | 2026-06-10 22:16:59 |
| CVE-2025-5318 | 5.4 | A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and t | 2026-09-06 21:17:21 | 2025-06-24 14:15:30 |
| CVE-2026-7163 | 6.1 | A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials | 2026-09-05 22:17:17 | 2026-04-30 14:16:36 |
| CVE-2026-71846 | 6.5 | A flaw was found in insights-client. The component's ServiceAccount is bound to a ClusterRole granting cluster-wide secrets get, list, and watch permissions, while the code only requires access to a single specific Secret. This excessive privilege me | 2026-09-05 18:17:28 | 2026-08-12 22:17:16 |
| CVE-2026-71845 | 6.3 | A flaw was found in insights-client. The setDefault() function logs the value of every environment variable it processes, including CCX_TOKEN, a bearer credential used in disconnected cluster deployments. When glog verbosity is set to level 2 or high | 2026-09-05 18:17:28 | 2026-08-11 20:18:45 |
| CVE-2026-71475 | 6.8 | A flaw was found in insights-client. A compromised managed cluster, referred to as a 'spoke', can inject unencoded data into the Insights API URL path. This occurs because the ClusterID, which is controlled by the spoke, is used directly in the reque | 2026-09-05 18:17:28 | 2026-08-11 20:18:45 |
| CVE-2026-71474 | 7.1 | A flaw was found in insights-client. When the application receives a non-200 response, it logs the request headers, which can include the cloud.openshift.com pull-secret token. A local user with access to pod logs on the hub could read this long-live | 2026-09-05 18:17:28 | 2026-08-11 20:18:45 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: