UN
Vendor
[UNKNOWN]
25
CVEs
1
On KEV
0
New 30D
Products
RI9.8
RichFaces
[UNKNOWN]
1 CVEs1 on KEV0 new
GN5.9
gnutls
[UNKNOWN]
3 CVEs0 on KEV0 new
CE6.5
ceph
[UNKNOWN]
2 CVEs0 on KEV0 new
OP7.5
openwsman
[UNKNOWN]
2 CVEs0 on KEV0 new
PY7.5
python
[UNKNOWN]
2 CVEs0 on KEV0 new
TT7.5
ttembed
[UNKNOWN]
2 CVEs0 on KEV0 new
AT5.0
atomic-openshift
[UNKNOWN]
1 CVEs0 on KEV0 new
DR7.5
dropbear
[UNKNOWN]
1 CVEs0 on KEV0 new
JE5.3
jenkins-email-ext
[UNKNOWN]
1 CVEs0 on KEV0 new
KU7.5
kube-rbac-proxy
[UNKNOWN]
1 CVEs0 on KEV0 new
LF6.5
lftp
[UNKNOWN]
1 CVEs0 on KEV0 new
LI5.5
libsndfile
[UNKNOWN]
1 CVEs0 on KEV0 new
PU6.5
pulp
[UNKNOWN]
1 CVEs0 on KEV0 new
RE6.2
redhat-certification:
[UNKNOWN]
1 CVEs0 on KEV0 new
RP7.8
rpm
[UNKNOWN]
1 CVEs0 on KEV0 new
SA7.2
Satellite
[UNKNOWN]
1 CVEs0 on KEV0 new
SP8.8
spice:
[UNKNOWN]
1 CVEs0 on KEV0 new
SY7.8
systemd
[UNKNOWN]
1 CVEs0 on KEV0 new
VD6.3
vdsm
[UNKNOWN]
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-1712 | SY systemd [UNKNOWN] | 7.8 | Mar 31 | A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages |
| CVE-2017-2659 | DR dropbear [UNKNOWN] | 7.5 | Mar 20 | It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid |
| CVE-2019-3832 | LI libsndfile [UNKNOWN] | 5.5 | Mar 20 | It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c |
| CVE-2019-3833 | OP openwsman [UNKNOWN] | 7.5 | Mar 14 | Openwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in process_connection() when parsing specially crafted HTTP requests |
| CVE-2019-3816 | OP openwsman [UNKNOWN] | 7.5 | Mar 14 | Openwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure because the working directory of openwsmand daemon was set to root directory |
| CVE-2019-3818 | KU kube-rbac-proxy [UNKNOWN] | 7.5 | Feb 5 | The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS… |
| CVE-2018-14666 | SA Satellite [UNKNOWN] | 7.2 | Jan 22 | An improper authorization flaw was found in the Smart Class feature of Foreman |
| CVE-2018-14662 | CE ceph [UNKNOWN] | 5.7 | Jan 15 | It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption |
| CVE-2018-16846 | CE ceph [UNKNOWN] | 6.5 | Jan 15 | It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices |
| CVE-2018-14667 In wildKEV | RI RichFaces [UNKNOWN] | 9.8 | Nov 6 | The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource |
| CVE-2018-10844 | GN gnutls [UNKNOWN] | 5.9 | Aug 22 | It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack |
| CVE-2018-10845 | GN gnutls [UNKNOWN] | 5.9 | Aug 22 | It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack |
| CVE-2018-10846 | GN gnutls [UNKNOWN] | 5.6 | Aug 22 | A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found |
| CVE-2018-10873 | SP spice: [UNKNOWN] | 8.8 | Aug 17 | A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks |
| CVE-2018-10917 | PU pulp [UNKNOWN] | 6.5 | Aug 15 | pulp 2.16.x and possibly older is vulnerable to an improper path parsing |
| CVE-2018-10864 | RE redhat-certification: [UNKNOWN] | 6.2 | Aug 13 | An uncontrolled resource consumption flaw has been discovered in redhat-certification in the way documents are loaded |
| CVE-2017-7500 | RP rpm [UNKNOWN] | 7.8 | Aug 13 | It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an… |
| CVE-2017-15138 | AT atomic-openshift [UNKNOWN] | 5.0 | Aug 13 | The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens |
| CVE-2018-10908 | VD vdsm [UNKNOWN] | 6.3 | Aug 9 | It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources |
| CVE-2017-2654 | JE jenkins-email-ext [UNKNOWN] | 5.3 | Aug 6 | jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure |
| CVE-2018-10922 | TT ttembed [UNKNOWN] | 5.5 | Aug 2 | An input validation flaw exists in ttembed |
| CVE-2018-10921 | TT ttembed [UNKNOWN] | 7.5 | Aug 2 | Certain input files may trigger an integer overflow in ttembed input file processing |
| CVE-2018-10916 | LF lftp [UNKNOWN] | 6.5 | Aug 1 | It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse… |
| CVE-2018-1061 | PY python [UNKNOWN] | 7.5 | Jun 19 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method |
| CVE-2018-1060 | PY python [UNKNOWN] | 7.5 | Jun 18 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method |