ovirt-engine-setup vulnerabilities (Red Hat)
49 vulnerabilities.
-
ovirt-engine-setupRed Hat Ovirt: authentication bypass 7.5 High -
ovirt-engine-setupRed Hat TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 4.7 Medium -
ovirt-engine-setupRed Hat A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log... 6.5 Medium -
ovirt-engine-setupRed Hat sosreport Exposure of Sensitive Information vulnerability 5.5 Medium -
ovirt-engine-setupRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
ovirt-engine-setupRed Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
ovirt-engine-setupRed Hat SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
ovirt-engine-setupRed Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
ovirt-engine-setupRed Hat Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High -
ovirt-engine-setupRed Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
ovirt-engine-setupRed Hat Improper Output Neutralization for Logs in Spring Framework 4.3 Medium -
ovirt-engine-setupRed Hat XSS in the `of` option of the `.position()` util 6.5 Medium -
ovirt-engine-setupRed Hat XSS in `*Text` options of the Datepicker widget 6.5 Medium -
ovirt-engine-setupRed Hat XSS in the `altField` option of the Datepicker widget 6.5 Medium -
ovirt-engine-setupRed Hat Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
ovirt-engine-setupRed Hat Regular Expression Denial of Service (ReDoS) 5.3 Medium -
ovirt-engine-setupRed Hat ReDoS in normalize-url 7.5 High -
ovirt-engine-setupRed Hat Arbitrary Code Injection 3.3 Low -
ovirt-engine-setupRed Hat Prototype Pollution 7.5 High -
ovirt-engine-setupRed Hat A flaw was found in all released versions of m2crypto, where they are vulnerable to... 5.9 Medium -
ovirt-engine-setupRed Hat A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other... 6.5 Medium -
ovirt-engine-setupRed Hat Prototype Pollution 7.3 High -
ovirt-engine-setupRed Hat XML External Entity (XXE) Injection in Jackson Databind 7.5 High -
ovirt-engine-setupRed Hat Regular Expression Denial of Service in Handlebars 7.5 High -
ovirt-engine-setupRed Hat Cross-site scripting in bootstrap-select 6.1 Medium -
ovirt-engine-setupRed Hat An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it... 5.3 Medium -
ovirt-engine-setupRed Hat A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not... 6.3 Medium -
ovirt-engine-setupRed Hat Prototype Pollution in lodash 7.4 High -
ovirt-engine-setupRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
ovirt-engine-setupRed Hat jQuery has a potential XSS vulnerability 6.9 Medium -
ovirt-engine-setupRed Hat A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization... 5.4 Medium -
ovirt-engine-setupRed Hat Prototype Pollution in minimist 5.6 Medium -
ovirt-engine-setupRed Hat A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub... 3.1 Low -
ovirt-engine-setupRed Hat Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT 9.8 Critical -
ovirt-engine-setupRed Hat Cross-Site Scripting in @novnc/novnc 6.1 Medium -
ovirt-engine-setupRed Hat Insecure Deserialization in Apache Commons Beanutils 7.3 High -
ovirt-engine-setupRed Hat XML external entity injection in Terracotta Quartz Scheduler 9.8 Critical -
ovirt-engine-setupRed Hat Arbitrary Code Execution in handlebars 8.1 High -
ovirt-engine-setupRed Hat It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is... 6.5 Medium -
ovirt-engine-setupRed Hat In ovirt-engine 4.1, if a host was provisioned with cloud-init, the root password could be... 8.8 High -
ovirt-engine-setupRed Hat Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
ovirt-engine-setupRed Hat ovirt-engine Logs Plaintext Passwords To File 7.2 High -
ovirt-engine-setupRed Hat ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log... 5.0 Medium -
ovirt-engine-setupRed Hat ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db... 5.0 Medium -
ovirt-engine-setupRed Hat linux-4.9 - security update 5.5 Medium -
ovirt-engine-setupRed Hat ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to... 7.7 High -
ovirt-engine-setupRed Hat A vulnerability was discovered in oVirt 4.1.x before 4.1.9, where the combination of Enable... 5.3 Medium -
ovirt-engine-setupRed Hat ovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for... 6.8 Medium -
ovirt-engine-setupRed Hat The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0... 3.3 Low