libsolv vulnerabilities (Red Hat)
150 vulnerabilities.
libsolvRed HatActive Record RCE bug with Serialized Columns9.8 CriticallibsolvRed HatApache Commons Configuration insecure interpolation defaults9.8 CriticallibsolvRed HatThe Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few...5.5 MediumlibsolvRed HatXSS Vulnerability in Action View tag helpers6.1 MediumlibsolvRed HatCross-site Scripting Vulnerability in Action Pack6.1 MediumlibsolvRed HatSQL Injection in Django9.8 CriticallibsolvRed HatSQL Injection in Django9.8 CriticallibsolvRed HatTwo heap-overflow vulnerabilities exist in openSUSE/libsolv libsolv through 13 Dec 2020 in the...6.5 MediumlibsolvRed HatInformation Exposure when using Puma with Rails8.0 HighlibsolvRed HatExposure of sensitive information in Action Pack7.4 HighlibsolvRed HatInfinite Loop in Django7.5 HighlibsolvRed HatCross-site Scripting in Django6.1 MediumlibsolvRed HatDenial of service in sidekiq7.5 HighlibsolvRed HatDirectory-traversal in Django5.3 MediumlibsolvRed HatInformation disclosure in Django7.5 HighlibsolvRed HatDenial-of-service in Django7.5 HighlibsolvRed HatA server side remote code execution vulnerability was found in Foreman project. A authenticated...7.2 HighlibsolvRed HatRCE from attacker with configuration edit priviledges through JNDI lookup6.6 MediumlibsolvRed HatHTML Cleaner allows crafted and SVG embedded scripts to pass through8.2 HighlibsolvRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 MediumlibsolvRed HatPotential bypass of an upstream access control based on URL paths in Django7.3 HighlibsolvRed HatInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma3.7 LowlibsolvRed HatRegular Expression Denial of Service in sqlparse7.5 HighlibsolvRed HatBuffer overflow vulnerability in function prune_to_recommended in src/policy.c in libsolv before...7.5 HighlibsolvRed HatBuffer overflow vulnerability in function pool_installable_whatprovides in src/repo.h in libsolv...7.5 HighlibsolvRed HatBuffer overflow vulnerability in function pool_disabled_solvable in src/repo.h in libsolv before...7.5 HighlibsolvRed HatBuffer overflow vulnerability in function pool_installable in src/repo.h in libsolv before 0.7.17...7.5 HighlibsolvRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 HighlibsolvRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 MediumlibsolvRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 MediumlibsolvRed HatBuffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,...3.3 LowlibsolvRed HatCross-site Scripting in Sidekiq6.1 MediumlibsolvRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 MediumlibsolvRed HatPossible request smuggling in HTTP/2 due missing validation5.9 MediumlibsolvRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 MediumlibsolvRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 MediumlibsolvRed HatXSS in Action View5.4 MediumlibsolvRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 HighlibsolvRed HatUntrusted users can run pending migrations in production in Rails6.5 MediumlibsolvRed HatCSRF Vulnerability in rails-ujs6.5 MediumlibsolvRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 HighlibsolvRed HatDeserialization of untrusted data in Jackson Databind8.1 HighlibsolvRed HatDeserialization of untrusted data in Jackson Databind8.1 HighlibsolvRed HatDeserialization of untrusted data in Jackson Databind8.1 HighlibsolvRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 HighlibsolvRed HatAbility to forge per-form CSRF tokens in Rails4.3 MediumlibsolvRed HatCircumvention of file size limits in ActiveStorage7.5 HighlibsolvRed HatPossible Strong Parameters Bypass in ActionPack7.5 HighlibsolvRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 CriticallibsolvRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 High- Show moreLoading…