Redhat

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presum

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @n

When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a sm

It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterCons

A flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL vulnerability. This issue

A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc s

In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is us

OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given op

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. Thi

A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this

Multiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow remote attackers to injec

Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token in the logout action. Th

It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For

Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the syste

In JBoss EAP 6 a security domain is configured to use a cache that is shared between all applications that are in the se

A flaw was found in the way Red Hat Quay stores robot account tokens in plain text. An attacker able to perform database

Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the

There is a vulnerability in all angular versions before 1.5.0-beta.0, where after escaping the context of the web applic

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application,

A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used D

A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protecti

Multiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow local users to cause a de

An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabl

A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has

The file /etc/openstack-dashboard/local_settings within Red Hat OpenStack Platform 2.0 and RHOS Essex Release (python-dj

In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which t

A flaw was found in Red Hat Ceph Storage version 3 in the way the Ceph RADOS Gateway daemon handles S3 requests. An auth

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer thro

An out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in virglrenderer through 0.8.0 allows

A heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer.c in virglrenderer thro

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite

Waitress through version 1.3.1 would parse the Transfer-Encoding header and only look for a single string value, if that

Waitress through version 1.3.1 implemented a "MAY" part of the RFC7230 which states: "Although the line terminator for t

swagger-ui has XSS in key names

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.4, when /websocket is requested and

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readab

A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where enabling RabbitMQ manager b

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in Ope

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPad

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS M

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS M

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS M

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS M

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS M

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS M