Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-14969 | 4.4 | A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to detect plaintext equality across | 2026-07-08 15:24:06 | 2026-07-07 16:16:38 |
| CVE-2026-14940 | 5.3 | A heap-buffer-overflow flaw was found in 389 Directory Server (389-ds-base). When normalizing a Distinguished Name (DN) that contains a legacy-quoted value encoding a multivalued nested Relative Distinguished Name (RDN), the server can write past the | 2026-07-08 15:24:06 | 2026-07-07 15:16:43 |
| CVE-2026-10609 | 6.8 | A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those creden | 2026-07-08 15:10:22 | 2026-06-23 14:17:21 |
| CVE-2018-10902 | 4.6 | It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status() which are part of snd_rawmidi_ioctl() handler in rawmi | 2026-07-07 15:16:40 | 2018-08-21 19:29:00 |
| CVE-2026-13325 | 8.5 | A flaw was found in KubeVirt's migration proxy. When spec.configuration.migrations.disableTLS is set to true on the KubeVirt custom resource, the target virt-handler binds a plain TCP listener on all interfaces (0.0.0.0/::) on a random port with no a | 2026-07-06 17:51:25 | 2026-06-26 11:16:30 |
| CVE-2026-13434 | 4.9 | A flaw was found in KubeVirt's network annotation generator. When a tenant creates a VirtualMachineInstance with a Multus network configuration, the supplied networkName value is written verbatim into the launcher pod's v1.multus-cni.io/default-netwo | 2026-07-06 17:51:23 | 2026-06-26 17:16:32 |
| CVE-2026-13208 | 6.5 | A flaw was found in KubeVirt's virt-handler domain notify server. The gRPC handlers for HandleDomainEvent and HandleK8SEvent derive the VMI identity (namespace/name) solely from the request body without validating it against the connection's origin. | 2026-07-06 17:51:17 | 2026-06-24 21:16:52 |
| CVE-2026-13218 | 4.2 | A flaw was found in KubeVirt's virt-handler network cache handling. The WriteToCachedFile function writes data to a launcher-rooted path using os.WriteFile and os.Chown without symlink protection. A user with access to the virt-launcher container can | 2026-07-06 17:46:14 | 2026-06-26 00:16:51 |
| CVE-2026-13318 | 6.4 | A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance (VMI), virt-api reads the target IP from vmi.Status.Interfaces[0].IP and passes it dir | 2026-07-06 17:45:33 | 2026-06-26 00:16:51 |
| CVE-2026-13316 | 4.4 | A flaw has been found in foreman when HTTP parameters are modified in http_proxies_controller and http_proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component. | 2026-07-06 17:29:58 | 2026-06-30 11:16:29 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: