haproxy vulnerabilities (Red Hat)
169 vulnerabilities.
haproxyRed HatIt was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster...4.6 MediumhaproxyRed HatValidating Admission Webhook does not observe some previous fields6.5 MediumhaproxyRed Hatmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 HighhaproxyRed HatCross-Site Request Forgery in Jenkins Credentials Plugin6.1 MediumhaproxyRed HatImproper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet5.3 MediumhaproxyRed HatMissing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs4.3 MediumhaproxyRed HatCSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files5.4 MediumhaproxyRed HatIncorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs6.5 MediumhaproxyRed HatXML External Entity Reference vulnerability in Jenkins Config File Provider Plugin8.1 HighhaproxyRed HatDenial of service in gopkg.in/yaml.v25.5 MediumhaproxyRed HatView name validation bypass in Jenkins4.3 MediumhaproxyRed HatLack of type validation in agent related REST API in Jenkins4.3 MediumhaproxyRed HatImproper Locking in github.com/containers/storage6.5 MediumhaproxyRed HatIncorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items6.5 MediumhaproxyRed HatIn Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect...6.5 MediumhaproxyRed HatStored XSS vulnerability in Jenkins on new item page5.4 MediumhaproxyRed HatReflected XSS vulnerability in Jenkins markup formatter preview6.1 MediumhaproxyRed HatMissing permission check for paths with specific prefix in Jenkins5.3 MediumhaproxyRed HatStored XSS vulnerability in Jenkins button labels5.4 MediumhaproxyRed HatExcessive memory allocation in graph URLs leads to denial of service in Jenkins6.5 MediumhaproxyRed HatArbitrary file existence check in file fingerprints in Jenkins4.3 MediumhaproxyRed HatPath traversal vulnerability in Jenkins agent names8.0 HighhaproxyRed HatImproper handling of REST API XML deserialization errors in Jenkins8.0 HighhaproxyRed HatXSS vulnerability in Jenkins notification bar5.4 MediumhaproxyRed HatArbitrary file read vulnerability in workspace browsers in Jenkins6.5 MediumhaproxyRed HatImproper Input Validation in GoGo Protobuf8.6 HighhaproxyRed HatIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...8.8 HighhaproxyRed HatThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...9.8 CriticalhaproxyRed Hatmcollective has a default password set at install9.8 CriticalhaproxyRed HatThe HTTP/2 implementation in HAProxy before 2.0.10 mishandles headers, as demonstrated by...9.8 CriticalhaproxyRed Hatopenshift-origin-node Improper Input Validation vulnerability5.5 MediumhaproxyRed HatA flaw was found in HAProxy before 2.0.6. In legacy mode, messages featuring a transfer-encoding...7.5 HighhaproxyRed HatWithdrawn Advisory: Prometheus XSS Vulnerability6.1 MediumhaproxyRed HatJenkins Config File Provider Plugin XSS vulnerability4.8 MediumhaproxyRed HatCross-site Scripting in Jenkins Blue Ocean Plugin5.4 MediumhaproxyRed HatCross-Site Request Forgery in Jenkins Blue Ocean Plugin6.5 MediumhaproxyRed HatJenkins Token Macro Plugin's recursive token expansion results in information disclosure and DoS8.1 HighhaproxyRed HatCross-Site Request Forgery in Jenkins Git Plugin4.3 MediumhaproxyRed HatImproper Authorization in Jenkins Core7.2 HighhaproxyRed HatImproper Authorization in Jenkins Core7.2 HighhaproxyRed HatJenkins Pipeline Declarative Plugin sandbox bypass vulnerability8.8 HighhaproxyRed HatJenkins Groovy Plugin sandbox bypass vulnerability8.8 HighhaproxyRed HatProtection Mechanism Failure in Jenkins Script Security Plugin8.8 HighhaproxyRed HatAn out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1...7.5 HighhaproxyRed HatAn issue was discovered in dns.c in HAProxy through 1.8.14. In the case of a compressed pointer,...7.5 HighhaproxyRed HatAn out-of-bounds read in dns_validate_dns_response in dns.c was discovered in HAProxy through 1.8...7.5 HighhaproxyRed HatJenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass8.8 HighhaproxyRed HatImproper Privilege Management in Jenkins8.8 HighhaproxyRed HatA flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...7.5 HighhaproxyRed HatJSON-Patch Out-of-bounds Write vulnerability7.7 High- Show moreLoading…