Redhat

The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it i

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKB

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC s

A divide by zero issue was found to occur in libvncserver-0.9.12. A malicious client could use this flaw to send a speci

An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020

A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning lev

An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an

An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block C

A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned

A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not ve

A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off

It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources

A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri para

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA d

A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible b

An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation ha

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in

A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for

A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Windo

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, watchO

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13.3, iCloud

A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configurati

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker t

A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegat

Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display syste

hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It m

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read ove

A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec reques

A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting i

A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after pl

A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file t

A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer

Pagure before 5.6 allows XSS via the templates/blame.html blame view.

An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecat

A flaw was found in the Ansible Engine, in ansible-engine 2.8.x before 2.8.15 and ansible-engine 2.9.x before 2.9.13, wh

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with

A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to C

A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain t

A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP

A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-au

A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed

It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the us

A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circ

A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. This flaw allows an attacker to craft

A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityMan

A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneous

The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a