Rezultati pretraživanja za 'Proizvođač: redhat'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-42009 | 7.5 | A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle | 2026-10-13 01:16:43 | 2026-05-18 13:16:32 |
| CVE-2026-42010 | 7.1 | A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted | 2026-10-13 01:16:43 | 2026-05-07 12:16:17 |
| CVE-2026-54100 | 8.3 | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. WMCO establishes SSH connections to Windows worker nodes without verifying the remote server host key. An adjacent-network attacker who can inter | 2026-10-12 21:17:17 | 2026-06-22 14:17:40 |
| CVE-2026-54099 | 8.8 | A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additiona | 2026-10-12 21:17:17 | 2026-06-22 14:17:40 |
| CVE-2026-18382 | 6.8 | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the operator sen | 2026-10-12 21:17:16 | 2026-07-30 12:17:27 |
| CVE-2026-18381 | 7.6 | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-acc | 2026-10-12 21:17:16 | 2026-07-30 12:17:27 |
| CVE-2026-18378 | 7.6 | A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster-global Red H | 2026-10-12 21:17:15 | 2026-07-30 12:17:27 |
| CVE-2026-13757 | 6.2 | A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRA | 2026-10-12 21:17:14 | 2026-06-29 19:16:40 |
| CVE-2026-13201 | 7.3 | A flaw was found in KubeVirt's safepath package used by virt-handler. The OpenAtNoFollow function uses O_PATH|O_NOFOLLOW to obtain a file descriptor to a path leaf, but downstream operations resolve the path via /proc/self/fd/N using link-following s | 2026-10-12 21:17:14 | 2026-06-24 21:16:52 |
| CVE-2025-6170 | 2.5 | A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow | 2026-10-12 21:17:07 | 2025-06-16 16:15:20 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/904
Zapisa po stranici: