Where
-Infinity
0

Red Hat oVirt EngineXSS, Input Validation

Risk 32
Severity
7
First published (updated )

debianoVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation

Risk 69
Severity
7.8
First published (updated )

Ovirt oVirtSensitive passwords used in deployment and configuration of oVirt Metrics were found to be insuffici…

Risk 33
Severity
5.9
First published (updated )

redhat/cockpit-ovirtDuring HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/o…

Risk 71
Severity
7.8
First published (updated )

Ovirt oVirtIt was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is triggere…

Risk 60
Severity
8.1
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.ovirt.engine.sdk:ovirt-engine-sdk-javaovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file w…

Risk 57
Severity
7.2
First published (updated )

Ovirt oVirtovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. …

Risk 86
Severity
9.8
First published (updated )

Ovirt oVirtInfoleak

Risk 44
Severity
7.7
First published (updated )

redhat Ovirt-engineXSS

Risk 29
Severity
4.8
First published (updated )

redhat/ovirt-engineIn oVirt 4.1, the Enable Discard feature was introduced. This was found to be unreliable in combina…

Risk 32
Severity
5.3
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ovirt oVirtA flaw was found in ovirt-engine. When engine-setup is run and one chooses to provision the database…

Risk 69
Severity
7.8
First published (updated )

Ovirt ovirt-hosted-engine-setupAn information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's passwo…

Risk 69
Severity
7.8
First published (updated )

Ovirt oVirtInfoleak

Risk 33
Severity
5.5
First published (updated )

redhat Ovirt-engineXSS

Risk 39
Severity
6.1
First published (updated )

redhat Ovirt-engineBuffer Overflow

Risk 39
Severity
6.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ovirt ovirt-nodeovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-47…

Risk 80
Severity
9
First published (updated )

redhat Ovirt-engineCSRF

Risk 47
Severity
6.8
First published (updated )

Ovirt oVirtInfoleak

Risk 26
Severity
5
First published (updated )

redhat Ovirt-engineoVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, wh…

Risk 72
Severity
7.5
First published (updated )

Ovirt oVirtIt was reported that oVirt 3.2.2 and later did not correctly terminate sessions when a user logged o…

Risk 18
Severity
4
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Ovirt oVirtInfoleak

Risk 22
Severity
4.3
First published (updated )

redhat Ovirt-engineSession fixation vulnerability in the web admin interface in oVirt 3.4.0 and earlier allows remote a…

Risk 47
Severity
6.8
First published (updated )

Red Hat oVirt EngineXSS

Risk 18
Severity
4
First published (updated )

redhat/ovirt-engine-sdk-python-3.4.0.7The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL cer…

Risk 27
Severity
5
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203