Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-13322 | 3.8 | A flaw was found in KubeVirt's downward metrics virtio-serial server. The server reads guest requests using textproto.Reader.ReadLine(), which buffers input indefinitely until a newline character is received, with no length limit or read deadline. A | 2026-07-06 17:25:39 | 2026-06-26 00:16:51 |
| CVE-2024-51127 | 7.1 | An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information. | 2026-07-05 01:21:01 | 2024-11-04 18:15:05 |
| CVE-2026-12388 | 6.5 | A flaw was found in the Identity Provider (IdP) mapper component of Keycloak, which is used to manage how user information from external services is mapped to Keycloak users. An administrator with limited permissions to manage identity providers can | 2026-07-01 20:26:45 | 2026-06-30 13:17:08 |
| CVE-2026-9705 | 6.5 | A flaw was found in Keycloak's client registration service. A remote attacker, possessing a previously issued Registration Access Token (RAT), could exploit this vulnerability to re-enable a client that an administrator had explicitly disabled. This | 2026-07-01 18:38:08 | 2026-06-25 17:17:03 |
| CVE-2026-9799 | 4.6 | A flaw was found in org.keycloak.authorization. An authenticated user with a granted User-Managed Access (UMA) permission ticket for one resource can exploit this by using a specific permission request prefix to bypass per-resource access control. Th | 2026-07-01 18:37:39 | 2026-06-25 17:17:04 |
| CVE-2026-11800 | 8.1 | A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an attacker with valid client credentials to bypass signature verification. By forging an assertion, the attacker can create unauthori | 2026-07-01 18:35:29 | 2026-06-25 22:17:00 |
| CVE-2026-9086 | 7.3 | A flaw was found in Keycloak. A remote attacker with administrative privileges, specifically those with `manage-client` permission or access to client registration endpoints, could bypass client Uniform Resource Identifier (URI) validation. This is a | 2026-07-01 17:23:37 | 2026-06-25 17:17:03 |
| CVE-2026-9099 | 7.7 | A flaw was found in Keycloak. A missing authorization check in the GroupResource.addChild() endpoint within the Admin REST API allows an authenticated user with limited administrative privileges to reparent any existing group. When Fine-Grained Admin | 2026-07-01 17:23:10 | 2026-06-25 17:17:03 |
| CVE-2026-9083 | 4.9 | A flaw was found in Keycloak. A realm administrator with the "manage-realm" role can exploit this vulnerability by submitting an arbitrary filesystem path as a keystore parameter when creating a key provider component. This allows the administrator t | 2026-07-01 17:22:17 | 2026-06-25 17:17:03 |
| CVE-2025-62231 | 7.3 | A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow. If an attacker sends specially crafted input data, the value calculation m | 2026-07-01 15:17:04 | 2025-10-30 05:15:39 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: