secalert@redhat.com
organizationUS01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS secalert@redhat.com
03
bewertete Schwachstellen (2,943)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-115486US | high7.1 | — | ||
A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet con… | ||||
| CVE-2026-115485US | medium6.3 | — | ||
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to re… | ||||
| CVE-2026-115484US | high7.6 | — | ||
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated bu… | ||||
| CVE-2026-115449US | low3.5 | — | ||
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the… | ||||
| CVE-2026-115424US | medium5.5 | — | ||
A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets… | ||||
| CVE-2026-115221US | medium5.4OT erhöht | — | ||
A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issu… | ||||
| CVE-2026-115207US | medium5.5 | — | ||
A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially… | ||||
| CVE-2026-111079US | high7.4 | — | ||
A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured… | ||||
| CVE-2026-114406US | medium6.8 | — | ||
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed i… | ||||
| CVE-2026-85518US | medium6.1 | — | ||
A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal… | ||||
| CVE-2026-114438US | medium4.2 | — | ||
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a… | ||||
| CVE-2026-110744US | high7.2 | — | ||
A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that grant cluster-wide imper… | ||||
| CVE-2026-114370US | low3.7 | — | ||
A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system. The issue occurs beca… | ||||
| CVE-2026-114236US | low3.3 | — | ||
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process… | ||||
| CVE-2026-17557US | medium6.5 | — | ||
A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malici… | ||||
| CVE-2026-92824US | medium6.2 | — | ||
A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of… | ||||
| CVE-2026-92823US | medium6.2 | — | ||
A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative dec… | ||||
| CVE-2026-92822US | medium6.2 | — | ||
A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a… | ||||
| CVE-2026-114038US | medium5.1 | — | ||
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the… | ||||
| CVE-2026-105941US | high8.1 | — | ||
The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the prox… | ||||