Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-62230 | 7.3 | A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup. The software frees certain data structures without properly detaching related resources, leading to a use-after-free condition. This can c | 2026-07-01 15:13:56 | 2025-10-30 06:15:45 |
| CVE-2026-42271 | 8.8 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/ | 2026-06-30 20:19:56 | 2026-05-08 04:16:21 |
| CVE-2026-11790 | 4.9 | A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password storage plugin does not enforce an upper bound on the iteration count extracted from stored password hashes. A privileged attacker who can modify a user's password hash can cause ex | 2026-06-30 14:16:25 | 2026-06-09 14:16:37 |
| CVE-2026-11789 | 4.9 | A flaw was found in 389 Directory Server. The SMD5 password storage plugin performs unsigned integer underflow when computing salt length from a crafted password hash shorter than 16 bytes, causing a buffer over-read that crashes the LDAP server duri | 2026-06-30 14:16:25 | 2026-06-09 14:16:37 |
| CVE-2026-11791 | 5.0 | A flaw was found in 389 Directory Server. During schema reload, the attr_syntax_swap_ht() function unconditionally frees attribute syntax information nodes, bypassing the refcount-based deferred deletion used elsewhere in the attribute syntax subsyst | 2026-06-30 11:16:28 | 2026-06-18 16:16:52 |
| CVE-2026-11787 | 5.0 | A flaw was found in 389 Directory Server. The ldap_utf8prev() function reads bytes before the start of a buffer without bounds checking, causing a heap buffer over-read in string filter parsing that may influence internal filter processing behavior. | 2026-06-30 09:16:24 | 2026-06-09 14:16:36 |
| CVE-2026-11786 | 1.9 | A flaw was found in 389 Directory Server. The LDIF parser reads past the end of a heap buffer when processing attribute types with trailing semicolons during database import, causing an out-of-bounds read detectable under memory instrumentation. | 2026-06-30 09:16:23 | 2026-06-09 14:16:36 |
| CVE-2026-11785 | 4.3 | A flaw was found in 389 Directory Server. A type confusion in the SSO token extended operation handler causes partial stack address information to be disclosed in LDAP responses to authenticated users. | 2026-06-30 09:16:23 | 2026-06-09 14:16:36 |
| CVE-2026-11611 | 6.5 | A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory growth when an authenticated client stops reading sync responses, enabling denial of service. Additional race conditions in plugin | 2026-06-30 09:16:23 | 2026-06-08 17:16:40 |
| CVE-2025-47712 | 6.5 | A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request. When a client requests block status information for a very large data range, exceeding a certain limit, it causes an internal error in the nbdk | 2026-06-30 05:17:23 | 2025-06-09 06:15:25 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: