Filter
AND
AND
Versions
Redhat Openshift Container PlatformPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library
8.2
EPSS
0.10%
First published (updated )
FreeBSD FreeBSDOpenSSH regreSSHion Attack (CVE-2024-6387)
8.1
EPSS
71.47%
First published (updated )
Redhat Openshift Container PlatformCri-o: malicious container can create symlink on host
8.1
EPSS
0.04%
First published (updated )
CVE-2024-5037Openshift/telemeter: iss check during jwt authentication can be bypassed
7.5
EPSS
0.07%
First published (updated )
Redhat Enterprise LinuxPodman: kernel: containers in shared ipc namespace are vulnerable to denial of service attack
7.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
go/github.com/cri-o/cri-oCri-o: pods are able to break out of resource confinement on cgroupv2
7.5
EPSS
0.06%
First published (updated )
Redhat Single Sign-onKeycloak: offline session token dos
7.7
EPSS
0.09%
First published (updated )
Redhat Single Sign-onKeycloak: redirect_uri validation bypass
7.1
First published (updated )
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Openshift Container Platform For LinuxoneOcp & fips mode
7.5
First published (updated )
Redhat Openshift Container PlatformUndertow: outofmemoryerror due to @multipartconfig handling
7.5
First published (updated )
redhat/rh-sso7-keycloakKeycloak: client access via device auth request spoof
8.1
First published (updated )
Redhat Openshift Container PlatformKeycloak: oauth client impersonation
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/eap7-undertowUndertow: infinite loop in sslconduit during close
7.5
First published (updated )
redhat/rh-sso7-keycloakKeycloak's OpenID Connect user authentication was found to incorrectly authenticate requests. An aut…
8.7
First published (updated )
Cloudbase Open VswitchA flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will instal…
8.2
First published (updated )
Redhat Enterprise LinuxAn incorrect handling of the supplementary groups in the Podman container engine might lead to the s…
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise LinuxAn incorrect handling of the supplementary groups in the Buildah container engine might lead to the …
7.1
First published (updated )
redhat/dpdkA permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to c…
8.6
First published (updated )
redhat/cri-oA vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyon…
7.8
First published (updated )
Fedoraproject FedoraA vulnerability was found in Ignition, where ignition configs are accessible from unprivileged conta…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Advanced Cluster Management For KubernetesOpenshift api admission checks does not enforce "custom-host" permissions
7.5
First published (updated )
Crun Project CrunA flaw was found in crun where containers were incorrectly started with non-empty default permission…
7.5
First published (updated )
Fedoraproject FedoraA flaw was found in Podman, where containers were started incorrectly with non-empty default permiss…
7.5
First published (updated )
redhat/haproxyA flaw was found in haproxy. Anybody who can add a "set-cookie2 X=Y" header into the return path fro…
7.5
First published (updated )
redhat/log4jDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ubuntu/openvswitchOpenvswitch don't match packets on nd_target field
7.1
First published (updated )
redhat/grub2A flaw was found in grub2 when handling JPEG images. This flaw allows an attacker to craft a malicio…
7.5
First published (updated )
redhat/grub2A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds …
7.5
First published (updated )
redhat/podmanA privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/polkitRed Hat Polkit Incorrect Authorization Vulnerability
First published (updated )
Fedoraproject FedoraThe decompression functionality of github.com/containers/storage in all versions starting from v1.23…
7.1
First published (updated )
Redhat Openshift Container PlatformIn OpenShift Container Platform 4, a privilege escalation path exists in Builds via the re-use of cr…
8.8
First published (updated )
Redhat Enterprise LinuxPodman versions prior to 1.7.0 ignore file permissions for non-root users running in a privileged co…
7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/openvswitchA flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause memor…
7.5
First published (updated )
Redhat Openshift Container PlatformA privilege escalation vulnerability exists in the build functionality of OpenShift Container Platfo…
8.8
First published (updated )
ubuntu/pygmentsAn infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when pe…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat CephUser credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila. An Op…
7.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.