ostree vulnerabilities (Red Hat)
143 vulnerabilities.
ostreeRed HatIn Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and...5.5 MediumostreeRed HatIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 HighostreeRed HatIn Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode7.4 HighostreeRed HatThe Bouncy Castle JCE Provider carry a propagation bug7.5 HighostreeRed HatIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 LowostreeRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumostreeRed HatIn Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values7.5 HighostreeRed HatIn Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification7.5 HighostreeRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.9 MediumostreeRed HatModerate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk155.3 MediumostreeRed HatIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate7.5 HighostreeRed HatDenial of Service in Google Guava5.9 MediumostreeRed HatBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisions4.4 MediumostreeRed HatAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...6.5 MediumostreeRed HatA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...8.8 HighostreeRed Hatrack-protection gem timing attack vulnerability when validating CSRF token5.9 MediumostreeRed HatDjango Denial-of-service possibility in truncatechars_html and truncatewords_html template filters5.3 MediumostreeRed HatDjango denial-of-service possibility in urlize and urlizetrunc template filters5.3 MediumostreeRed HatIn previous versions of Puppet Agent it was possible for the agent to retrieve facts from an...6.5 MediumostreeRed HatDjango vulnerable to information leakage in AuthenticationForm7.5 HighostreeRed HatPrivilege Escalation in Hibernate Validator7.0 HighostreeRed HatTarball permission preservation in puppet5.5 MediumostreeRed Hatnet-ldap Improper Certificate Validation vulnerability5.9 MediumostreeRed HatAn attacker submitting facts to the Foreman server containing HTML can cause a stored XSS on...6.1 MediumostreeRed Hatjackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution9.8 CriticalostreeRed HatPallets Werkzeug cross-site scripting vulnerability6.1 MediumostreeRed HatCross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after.6.1 MediumostreeRed HatWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 CriticalostreeRed HatForeman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the...8.1 HighostreeRed Hatclient/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer...7.5 HighostreeRed Hatpulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate...5.5 MediumostreeRed HatThe pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or...7.1 HighostreeRed HatThe Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world...5.5 MediumostreeRed HatDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 MediumostreeRed HatQOS.ch Logback vulnerable to Deserialization of Untrusted Data9.8 CriticalostreeRed HatDenial of service in JBoss resteasy7.5 HighostreeRed HatEval injection vulnerability in tftp_api.rb in the TFTP module in the Smart-Proxy in Foreman...8.8 HighostreeRed HatModerate severity vulnerability that affects org.apache.qpid:proton-j6.5 MediumostreeRed HatBouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain...3.3 LowostreeRed HatRack vulnerable to Denial of Service via large parameter depth request5.0 MediumostreeRed Hatrest-client Gem Vulnerable to Session Fixation9.8 CriticalostreeRed Hatrest-client allows local users to obtain sensitive information by reading the log2.1 LowostreeRed HatMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...7.5 High