| CVE-2019-19906 | 高7.5 | cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an off-by-one error in _sasl_add_string in common.c in cyrus-sasl. | 19/12/2019 |
| CVE-2012-2312 | 高7.8 | An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread pool that still retains the security context from the process last used, which lets a local user obtain elevated privileges. | 18/12/2019 |
| CVE-2014-3701 | 高8.1 | eDeploy has tmp file race condition flaws | 15/12/2019 |
| CVE-2014-3699 | 緊急9.8 | eDeploy has RCE via cPickle deserialization of untrusted data | 15/12/2019 |
| CVE-2014-3652 | 中6.1 | JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL. | 15/12/2019 |
| CVE-2014-3536 | 中5.5 | CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration | 15/12/2019 |
| CVE-2014-0241 | 中5.5 | rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable | 13/12/2019 |
| CVE-2014-0197 | 高8.8 | CFME: CSRF protection vulnerability via permissive check of the referrer header | 13/12/2019 |
| CVE-2014-0175 | 緊急9.8 | mcollective has a default password set at install | 13/12/2019 |
| CVE-2019-14849 | 中5.4 | A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain access to unauthorized information. | 12/12/2019 |
| CVE-2014-0163 | 高8.8 | Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. | 11/12/2019 |
| CVE-2014-0026 | 中6.5 | katello-headpin is vulnerable to CSRF in REST API | 11/12/2019 |
| CVE-2013-7370 | 中6.1 | node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware | 11/12/2019 |
| CVE-2013-6495 | 中6.1 | JBossWeb Bayeux has reflected XSS | 11/12/2019 |
| CVE-2019-13734 | 高8.8 | Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 10/12/2019 |
| CVE-2013-2167 | 緊急9.8 | python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass | 10/12/2019 |
| CVE-2013-2166 | 緊急9.8 | python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass | 10/12/2019 |
| CVE-2013-1793 | 高7.5 | openstack-utils openstack-db has insecure password creation | 10/12/2019 |
| CVE-2012-2148 | 低3.3 | An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies | 06/12/2019 |
| CVE-2019-11255 | 中6.5 | Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, resto | 05/12/2019 |