libwebsockets vulnerabilities (Red Hat)
122 vulnerabilities.
libwebsocketsRed HatPossible XSS vulnerability in ActionView4.0 MediumlibwebsocketsRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 HighlibwebsocketsRed HatSQL injection in Django8.8 HighlibwebsocketsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticallibwebsocketsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticallibwebsocketsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticallibwebsocketsRed HatImproper Certificate Validation in Puppet6.5 MediumlibwebsocketsRed HatDeserialization of Untrusted Data in jackson-databind9.8 CriticallibwebsocketsRed HatHTTP Request Smuggling in Netty7.5 HighlibwebsocketsRed HatLimited header injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumlibwebsocketsRed HatDirective injection when using dynamic overrides with user input in RubyGems secure_headers4.4 MediumlibwebsocketsRed HatPossible Information Leak / Session Hijack Vulnerability in Rack6.3 MediumlibwebsocketsRed HatPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 MediumlibwebsocketsRed HatKatello cleartext password storage issue4.1 MediumlibwebsocketsRed HatDouble Free in psutil7.5 HighlibwebsocketsRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 MediumlibwebsocketsRed HatApache MINA SSLFilter security Issue7.5 HighlibwebsocketsRed HatInsecure Deserialization in Apache Commons Beanutils7.3 HighlibwebsocketsRed HatAn authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,...6.5 MediumlibwebsocketsRed HatDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS5.3 MediumlibwebsocketsRed HatTwisted CRLF Injection6.1 MediumlibwebsocketsRed HatInformation exposure in FasterXML jackson-databind7.5 HighlibwebsocketsRed HatIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...5.5 MediumlibwebsocketsRed HatA lack of access control was found in the message queues maintained by Satellite's QPID broker...8.0 HighlibwebsocketsRed HatIn Foreman it was discovered that the delete compute resource operation, when executed from the...4.9 MediumlibwebsocketsRed HatJinja2 sandbox escape vulnerability8.6 HighlibwebsocketsRed HatJinja2 sandbox escape via string formatting8.6 HighlibwebsocketsRed Hatkatello Cross-site Scripting vulnerability5.4 MediumlibwebsocketsRed HatA cross-site scripting (XSS) flaw was found in the foreman component of satellite. An attacker...7.6 HighlibwebsocketsRed HatRack vulnerable to Denial of Service7.5 HighlibwebsocketsRed HatImproper Privilege Management in MySQL Connectors Java8.8 HighlibwebsocketsRed HatA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...5.4 MediumlibwebsocketsRed Hatkatello Improper Privilege Management vulnerability4.3 MediumlibwebsocketsRed HatDom4j contains a XML Injection vulnerability7.5 HighlibwebsocketsRed HatWithdrawn Advisory: Pulp Improper Path Parsing6.8 MediumlibwebsocketsRed HatRed Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering...3.5 LowlibwebsocketsRed HatIn Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and...5.5 MediumlibwebsocketsRed HatIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighlibwebsocketsRed HatIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighlibwebsocketsRed HatThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighlibwebsocketsRed HatIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowlibwebsocketsRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumlibwebsocketsRed HatIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighlibwebsocketsRed HatIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighlibwebsocketsRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumlibwebsocketsRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumlibwebsocketsRed HatIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighlibwebsocketsRed HatDenial of Service in Google Guava5.9 MediumlibwebsocketsRed HatBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 MediumlibwebsocketsRed HatAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...6.5 Medium- Show moreLoading…