pcs-debuginfo vulnerabilities (Red Hat)
21 vulnerabilities.
-
pcs-debuginfoRed Hat Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
pcs-debuginfoRed Hat Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion) 7.5 High -
pcs-debuginfoRed Hat Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) 7.5 High -
pcs-debuginfoRed Hat Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
pcs-debuginfoRed Hat Possible shell escape sequence injection vulnerability in Rack 10.0 Critical -
pcs-debuginfoRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
pcs-debuginfoRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
pcs-debuginfoRed Hat pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user... 8.7 High -
pcs-debuginfoRed Hat pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST... 4.3 Medium -
pcs-debuginfoRed Hat rack-protection gem timing attack vulnerability when validating CSRF token 5.9 Medium -
pcs-debuginfoRed Hat Session fixation vulnerability in pcsd in pcs before 0.9.157. 8.1 High -
pcs-debuginfoRed Hat Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149. 8.8 High -
pcs-debuginfoRed Hat The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary... 8.5 High -
pcs-debuginfoRed Hat Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames,... 4.9 Medium -
pcs-debuginfoRed Hat Rack vulnerable to Denial of Service via large parameter depth request 5.0 Medium -
pcs-debuginfoRed Hat The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set... 4.3 Medium -
pcs-debuginfoRed Hat The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an... 6.8 Medium -
pcs-debuginfoRed Hat OpenStack Swift metadata constraints are not correctly enforced 4.0 Medium -
pcs-debuginfoRed Hat The wato component in Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 uses the pickle Python... 9.3 High -
pcs-debuginfoRed Hat Check_MK before 1.2.4p4 and 1.2.5 before 1.2.5i4 allows remote authenticated users to write... 4.9 Medium -
pcs-debuginfoRed Hat Multiple cross-site scripting (XSS) vulnerabilities in the multisite component in Check_MK before... 3.5 Low