Redhat

redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use t

redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker

Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could

An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An

Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operating

Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs). Supported versions that are

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported versions that are affected

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Support

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported vers

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may h

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute a

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute a

Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function. An at

The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", fo

It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker

A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it poin

A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or P

A flaw was found in the way signature calculation was handled by cephx authentication protocol. An attacker having acces

It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attac

A flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having read access to ceph can d

Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploita

Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability. Successful exploitation cou

Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could

Adobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability. Successful exploitation could le

In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an i

The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi path

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an

The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty

In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash

setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to /

Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issu

source-to-image component of Openshift Container Platform before versions atomic-openshift 3.7.53, atomic-openshift 3.9.

It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.

In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command w

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to c

It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An

Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when starte

There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower, 2.12

ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup w

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that c

The UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too wide permissions, whic

Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An at

389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference in the way LDAP bind r

System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentia

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access