ovirt-engine-setup-plugin-cinderlib vulnerabilities (Red Hat)
39 vulnerabilities.
-
ovirt-engine-setup-plugin-cinderlibRed Hat Ovirt: authentication bypass 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 4.7 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log... 6.5 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat sosreport Exposure of Sensitive Information vulnerability 5.5 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
ovirt-engine-setup-plugin-cinderlibRed Hat SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
ovirt-engine-setup-plugin-cinderlibRed Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Improper Output Neutralization for Logs in Spring Framework 4.3 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat XSS in the `of` option of the `.position()` util 6.5 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat XSS in `*Text` options of the Datepicker widget 6.5 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat XSS in the `altField` option of the Datepicker widget 6.5 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Regular Expression Denial of Service (ReDoS) 5.3 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat ReDoS in normalize-url 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Arbitrary Code Injection 3.3 Low -
ovirt-engine-setup-plugin-cinderlibRed Hat Prototype Pollution 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat A flaw was found in all released versions of m2crypto, where they are vulnerable to... 5.9 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other... 6.5 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat Prototype Pollution 7.3 High -
ovirt-engine-setup-plugin-cinderlibRed Hat XML External Entity (XXE) Injection in Jackson Databind 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Regular Expression Denial of Service in Handlebars 7.5 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Cross-site scripting in bootstrap-select 6.1 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it... 5.3 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not... 6.3 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat Prototype Pollution in lodash 7.4 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat jQuery has a potential XSS vulnerability 6.9 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization... 5.4 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat Prototype Pollution in minimist 5.6 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub... 3.1 Low -
ovirt-engine-setup-plugin-cinderlibRed Hat Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT 9.8 Critical -
ovirt-engine-setup-plugin-cinderlibRed Hat Cross-Site Scripting in @novnc/novnc 6.1 Medium -
ovirt-engine-setup-plugin-cinderlibRed Hat Insecure Deserialization in Apache Commons Beanutils 7.3 High -
ovirt-engine-setup-plugin-cinderlibRed Hat XML external entity injection in Terracotta Quartz Scheduler 9.8 Critical -
ovirt-engine-setup-plugin-cinderlibRed Hat Arbitrary Code Execution in handlebars 8.1 High -
ovirt-engine-setup-plugin-cinderlibRed Hat Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium