Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-9073 | 6.2 | A flaw was found in foreman-mcp-server. This component utilizes two distinct logging mechanisms that can expose sensitive session and authentication data. One mechanism logs session identifiers, which are treated as authentication credentials, at an | 2026-07-15 15:16:49 | 2026-06-23 21:17:03 |
| CVE-2026-59818 | 6.5 | etcd is a distributed key-value store for the data of a distributed system. Prior to 3.5.32 and 3.6.13, when etcd is configured with --listen-client-http-urls to split HTTP and gRPC client endpoints onto separate listeners, the --client-crl-file Cert | 2026-07-13 14:50:12 | 2026-07-08 21:16:54 |
| CVE-2026-1462 | 8.8 | A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`. This bypasses the security guarante | 2026-07-10 12:16:32 | 2026-04-13 15:17:18 |
| CVE-2025-8766 | 6.4 | A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can | 2026-07-10 12:16:27 | 2026-03-13 19:53:56 |
| CVE-2026-5136 | 8.8 | A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, includi | 2026-07-09 02:39:36 | 2026-07-01 14:16:47 |
| CVE-2026-5135 | 6.5 | A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nes | 2026-07-09 02:39:11 | 2026-07-01 15:17:11 |
| CVE-2026-5138 | 4.3 | A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and | 2026-07-09 02:38:49 | 2026-07-01 15:17:11 |
| CVE-2026-5142 | 6.5 | A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability lea | 2026-07-09 02:38:36 | 2026-07-01 15:17:11 |
| CVE-2022-27406 | 5.0 | FreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation violation via the function FT_Request_Size. | 2026-07-09 01:17:23 | 2022-04-22 14:15:09 |
| CVE-2022-27405 | 5.0 | FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the function FNT_Size_Request. | 2026-07-09 01:17:23 | 2022-04-22 14:15:09 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: