Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-15573 | 8.1 | A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or mat | 2026-08-31 10:16:48 | 2026-08-05 15:16:36 |
| CVE-2026-14613 | 4.3 | A vulnerability was discovered in Keycloak's administrative interface that allows certain administrators to see information about groups they shouldn't have access to. When the new Fine-Grained Admin Permissions (FGAP v2) are turned on, an administra | 2026-08-31 10:16:48 | 2026-07-03 16:16:55 |
| CVE-2023-36664 | 7.8 | Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix). | 2026-08-27 18:52:52 | 2023-06-25 22:15:21 |
| CVE-2024-7341 | 7.1 | A session fixation issue was discovered in the SAML adapters provided by Keycloak. The session ID and JSESSIONID cookie are not changed at login time, even when the turnOffChangeSessionIdOnLogin option is configured. This flaw allows an attacker who | 2026-08-27 13:16:33 | 2024-09-09 19:15:14 |
| CVE-2021-41164 | 3.5 | CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML by | 2026-08-25 16:28:27 | 2021-11-17 19:15:08 |
| CVE-2021-41184 | 4.3 | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string v | 2026-08-25 16:28:27 | 2021-10-26 15:15:10 |
| CVE-2021-41183 | 4.3 | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The v | 2026-08-25 16:28:27 | 2021-10-26 15:15:10 |
| CVE-2021-41182 | 4.3 | jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any str | 2026-08-25 16:28:27 | 2021-10-26 15:15:10 |
| CVE-2020-25649 | 5.0 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity. | 2026-08-25 16:28:27 | 2020-12-03 17:15:12 |
| CVE-2020-9484 | 4.4 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the Persiste | 2026-08-25 16:28:27 | 2020-05-20 19:15:09 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: