libsolv vulnerabilities (Red Hat)
150 vulnerabilities.
libsolvRed HatImproper Input Validation in Hibernate Validator5.3 MediumlibsolvRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 HighlibsolvRed HatDenial of Service in Netty7.5 HighlibsolvRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighlibsolvRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighlibsolvRed HatPossible XSS vulnerability in ActionView4.0 MediumlibsolvRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 HighlibsolvRed HatSQL injection in Django8.8 HighlibsolvRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticallibsolvRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticallibsolvRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticallibsolvRed HatImproper Certificate Validation in Puppet6.5 MediumlibsolvRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticallibsolvRed HatHTTP Request Smuggling in Netty7.5 HighlibsolvRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumlibsolvRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumlibsolvRed Hatrepodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a...7.5 HighlibsolvRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 MediumlibsolvRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 MediumlibsolvRed HatKatello cleartext password storage issue4.1 MediumlibsolvRed HatDouble Free in psutil7.5 HighlibsolvRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 MediumlibsolvRed HatApache MINA SSLFilter security Issue7.5 HighlibsolvRed HatInsecure Deserialization in Apache Commons Beanutils7.3 HighlibsolvRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 MediumlibsolvRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 MediumlibsolvRed HatTwisted CRLF Injection6.1 MediumlibsolvRed HatInformation exposure in FasterXML jackson-databind7.5 HighlibsolvRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 MediumlibsolvRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 MediumlibsolvRed HatJinja2 sandbox escape vulnerability8.6 HighlibsolvRed HatJinja2 sandbox escape via string formatting8.6 HighlibsolvRed HatA use-after-free flaw has been discovered in libcomps before version 0.1.10 in the way ObjMRTrees...7.5 HighlibsolvRed Hatkatello Cross-site Scripting vulnerability5.4 MediumlibsolvRed Hat** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv...6.5 MediumlibsolvRed HatThere is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in...6.5 MediumlibsolvRed HatThere is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in...6.5 MediumlibsolvRed HatA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 HighlibsolvRed HatRack vulnerable to Denial of Service7.5 HighlibsolvRed HatImproper Privilege Management in MySQL Connectors Java8.8 HighlibsolvRed HatA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...5.4 MediumlibsolvRed Hatkatello Improper Privilege Management vulnerability4.3 MediumlibsolvRed HatDom4j contains a XML Injection vulnerability7.5 HighlibsolvRed HatWithdrawn Advisory: Pulp Improper Path Parsing6.8 MediumlibsolvRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 MediumlibsolvRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 MediumlibsolvRed HatPallets Werkzeug cross-site scripting vulnerability6.1 MediumlibsolvRed HatDenial of service in JBoss resteasy7.5 HighlibsolvRed Hatrest-client Gem Vulnerable to Session Fixation9.8 CriticallibsolvRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 Low