pcs-snmp vulnerabilities (Red Hat)
42 vulnerabilities.
-
pcs-snmpRed Hat Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop 7.5 High -
pcs-snmpRed Hat lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
pcs-snmpRed Hat Tornado has a DoS due to too many multipart parts 8.7 High -
pcs-snmpRed Hat Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
pcs-snmpRed Hat Tornado is Vulnerable to Quadratic DoS via Crafted Multipart Parameters 7.5 High -
pcs-snmpRed Hat Tornado is Vulnerable to Quadratic DoS via Repeated Header Coalescing 7.5 High -
pcs-snmpRed Hat Rack is vulnerable to a memory-exhaustion DoS through unbounded URL-encoded body parsing 7.5 High -
pcs-snmpRed Hat Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion) 7.5 High -
pcs-snmpRed Hat Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion) 7.5 High -
pcs-snmpRed Hat Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion) 7.5 High -
pcs-snmpRed Hat Rack QueryParser has an unsafe default allowing params_limit bypass via semicolon-separated parameters 7.5 High -
pcs-snmpRed Hat Tornado vulnerable to excessive logging caused by malformed multipart form data 7.5 High -
pcs-snmpRed Hat Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
pcs-snmpRed Hat Possible Log Injection in Rack::CommonLogger 5.7 Medium -
pcs-snmpRed Hat Tornado has HTTP cookie parsing DoS vulnerability 7.5 High -
pcs-snmpRed Hat Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision 5.4 Medium -
pcs-snmpRed Hat REXML ReDoS vulnerability 6.6 Medium -
pcs-snmpRed Hat REXML denial of service vulnerability 5.9 Medium -
pcs-snmpRed Hat REXML DoS vulnerability 5.3 Medium -
pcs-snmpRed Hat REXML DoS vulnerability 5.3 Medium -
pcs-snmpRed Hat Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding 9.0 Critical -
pcs-snmpRed Hat REXML contains a denial of service vulnerability 5.3 Medium -
pcs-snmpRed Hat Rack ReDos in content type parsing (2nd degree polynomial) 5.3 Medium -
pcs-snmpRed Hat Possible DoS Vulnerability with Range Header in Rack 5.8 Medium -
pcs-snmpRed Hat Possible Denial of Service Vulnerability in Rack Header Parsing 5.3 Medium -
pcs-snmpRed Hat It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of... 9.8 Critical -
pcs-snmpRed Hat Possible Denial of Service Vulnerability in Rack's header parsing 5.3 Medium -
pcs-snmpRed Hat Cross-realm object access in Webpack 5 9.8 Critical -
pcs-snmpRed Hat Rack has possible DoS Vulnerability in Multipart MIME parsing 7.5 High -
pcs-snmpRed Hat Sinatra vulnerable to Reflected File Download attack 8.8 High -
pcs-snmpRed Hat decode-uri-component vulnerable to Denial of Service (DoS) 7.5 High -
pcs-snmpRed Hat A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a... 7.8 High -
pcs-snmpRed Hat Possible shell escape sequence injection vulnerability in Rack 10.0 Critical -
pcs-snmpRed Hat sinatra does not validate expanded path matches 7.5 High -
pcs-snmpRed Hat A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired... 8.8 High -
pcs-snmpRed Hat Cross-Site Scripting in jquery 6.1 Medium -
pcs-snmpRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
pcs-snmpRed Hat Unsafe object creation in json RubyGem 7.5 High -
pcs-snmpRed Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
pcs-snmpRed Hat pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user... 8.7 High -
pcs-snmpRed Hat pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST... 4.3 Medium -
pcs-snmpRed Hat rack-protection gem timing attack vulnerability when validating CSRF token 5.9 Medium