Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: redhat'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-32591 5.2 A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it p 2026-09-22 18:17:13
CVE-2020-6851 5.0 OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation. 2026-09-22 18:17:08
CVE-2026-34486 7.5 Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146 allowing the bypass of the EncryptInterceptor. This issue affects Apache Tomcat: 11.0.20, 10.1.53, 9.0.116. Users are recommended to upgrade to ve 2026-09-21 19:17:04
CVE-2025-31277 8.8 The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption. 2026-09-21 17:17:25
CVE-2024-12085 7.5 A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of un 2026-09-21 15:17:25
CVE-2026-28369 8.7 A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can 2026-09-21 14:17:15
CVE-2026-28368 8.7 A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are parsed differently by Undertow compared to upstream proxies. This discrepancy in header interpretation can be exp 2026-09-21 14:17:15
CVE-2026-28367 8.7 A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be used for request smuggling with certain proxy servers, such as older versions of Apache Traffic Server and Go 2026-09-21 14:17:15
CVE-2026-71227 5.1 A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all() function can enter a non-t 2026-09-21 13:17:10
CVE-2026-71226 7.3 Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers. 2026-09-21 13:17:10
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/904
Zapisa po stranici: