Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-3832 | 3.7 | A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP | 2026-09-29 01:16:47 | 2026-04-30 18:16:30 |
| CVE-2026-33845 | 7.5 | A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause inform | 2026-09-29 01:16:46 | 2026-04-30 18:16:28 |
| CVE-2026-2100 | 5.3 | A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attemp | 2026-09-29 01:16:46 | 2026-03-26 21:17:04 |
| CVE-2025-14512 | 6.5 | A flaw was found in glib. This vulnerability allows a heap buffer overflow and denial-of-service (DoS) via an integer overflow in GLib's GIO (GLib Input/Output) escape_byte_string() function when processing malicious file or remote filesystem attribu | 2026-09-29 01:16:42 | 2025-12-11 07:16:00 |
| CVE-2026-73198 | 7.5 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory e | 2026-09-28 10:16:45 | 2026-08-20 11:16:21 |
| CVE-2026-73197 | 7.5 | A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the `/ipa/migration/migration.py` endpoint. This can force the migration handler to read attacker-controlled req | 2026-09-28 10:16:44 | 2026-08-20 11:16:21 |
| CVE-2026-19550 | 8.2 | A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Direc | 2026-09-28 10:16:44 | 2026-08-11 21:17:35 |
| CVE-2026-13097 | 8.7 | A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a | 2026-09-28 10:16:43 | 2026-08-20 11:16:20 |
| CVE-2026-11861 | 9.6 | A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible b | 2026-09-28 10:16:42 | 2026-08-20 11:16:19 |
| CVE-2023-54365 | 7.5 | Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's HTTP/2 implementation (CVE-2023-44487 / CVE-2023-39325, the 'Rapid Reset' technique). A remote | 2026-09-26 23:10:00 | 2026-06-23 13:16:30 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: