Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-32590 | 7.1 | A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay s | 2026-08-15 23:16:21 | 2026-04-08 18:25:59 |
| CVE-2021-33034 | 4.6 | In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-5c4c8c954409. This leads to writing an arbitrary value. | 2026-08-13 19:32:41 | 2021-05-14 23:15:09 |
| CVE-2021-40490 | 4.4 | A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. | 2026-08-13 19:32:28 | 2021-09-03 01:15:07 |
| CVE-2022-1055 | 4.6 | A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4 | 2026-08-13 19:30:55 | 2022-03-29 15:15:08 |
| CVE-2017-12149 | 7.5 | In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus al | 2026-08-13 05:17:15 | 2017-10-04 21:01:00 |
| CVE-2023-44487 | 7.5 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. | 2026-08-11 19:37:30 | 2023-10-10 14:15:10 |
| CVE-2021-44228 | 9.3 | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An atta | 2026-08-11 19:33:44 | 2021-12-10 10:15:09 |
| CVE-2024-9341 | 5.4 | A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and tri | 2026-08-11 16:17:25 | 2024-10-01 19:15:09 |
| CVE-2024-50312 | 5.3 | A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the atta | 2026-08-11 16:17:21 | 2024-10-22 14:15:19 |
| CVE-2026-14614 | 5.4 | A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP) v2 is enabled. This issue allows a delegated administrator, who should only have limited control over specific clients, to attach | 2026-08-11 15:06:15 | 2026-07-03 16:16:55 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: