python3-ovirt-engine-lib vulnerabilities (Red Hat)

36 vulnerabilities.

• python3-ovirt-engine-lib Red Hat Ovirt: authentication bypass CVE-2024-0822 Fix available 7.5 HighJanuary 25, 2024
• python3-ovirt-engine-lib Red Hat TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc CVE-2022-41946 Fix available 4.7 MediumNovember 23, 2022
• python3-ovirt-engine-lib Red Hat A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log... CVE-2022-2805 6.5 MediumOctober 19, 2022
• python3-ovirt-engine-lib Red Hat sosreport Exposure of Sensitive Information vulnerability CVE-2022-2806 Fix available 5.5 MediumSeptember 1, 2022
• python3-ovirt-engine-lib Red Hat Inefficient Regular Expression Complexity in moment CVE-2022-31129 Fix available 7.5 HighJuly 6, 2022
• python3-ovirt-engine-lib Red Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• python3-ovirt-engine-lib Red Hat SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• python3-ovirt-engine-lib Red Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• python3-ovirt-engine-lib Red Hat Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects CVE-2022-0155 Public exploitFix available 8.0 HighJanuary 10, 2022
• python3-ovirt-engine-lib Red Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• python3-ovirt-engine-lib Red Hat Improper Output Neutralization for Logs in Spring Framework CVE-2021-22096 Fix available 4.3 MediumOctober 28, 2021
• python3-ovirt-engine-lib Red Hat XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• python3-ovirt-engine-lib Red Hat XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• python3-ovirt-engine-lib Red Hat XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• python3-ovirt-engine-lib Red Hat Inefficient Regular Expression Complexity in chalk/ansi-regex CVE-2021-3807 Fix available 7.5 HighSeptember 17, 2021
• python3-ovirt-engine-lib Red Hat Regular Expression Denial of Service (ReDoS) CVE-2021-23425 Fix available 5.3 MediumAugust 18, 2021
• python3-ovirt-engine-lib Red Hat ReDoS in normalize-url CVE-2021-33502 Fix available 7.5 HighMay 24, 2021
• python3-ovirt-engine-lib Red Hat Arbitrary Code Injection CVE-2021-23358 Public exploitFix available 3.3 LowMarch 29, 2021
• python3-ovirt-engine-lib Red Hat Prototype Pollution CVE-2020-28477 Fix available 7.5 HighJanuary 19, 2021
• python3-ovirt-engine-lib Red Hat A flaw was found in all released versions of m2crypto, where they are vulnerable to... CVE-2020-25657 Fix available 5.9 MediumJanuary 12, 2021
• python3-ovirt-engine-lib Red Hat A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other... CVE-2020-35497 Fix available 6.5 MediumDecember 21, 2020
• python3-ovirt-engine-lib Red Hat Prototype Pollution CVE-2020-28458 Public exploitFix available 7.3 HighDecember 16, 2020
• python3-ovirt-engine-lib Red Hat XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• python3-ovirt-engine-lib Red Hat Regular Expression Denial of Service in Handlebars CVE-2019-20922 Fix available 7.5 HighSeptember 30, 2020
• python3-ovirt-engine-lib Red Hat Cross-site scripting in bootstrap-select CVE-2019-20921 Fix available 6.1 MediumSeptember 3, 2020
• python3-ovirt-engine-lib Red Hat An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it... CVE-2020-10775 5.3 MediumAugust 24, 2020
• python3-ovirt-engine-lib Red Hat A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not... CVE-2020-14333 6.3 MediumAugust 18, 2020
• python3-ovirt-engine-lib Red Hat Prototype Pollution in lodash CVE-2020-8203 Public exploitFix available 7.4 HighJuly 15, 2020
• python3-ovirt-engine-lib Red Hat Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• python3-ovirt-engine-lib Red Hat jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• python3-ovirt-engine-lib Red Hat A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization... CVE-2019-19336 Fix available 5.4 MediumMarch 19, 2020
• python3-ovirt-engine-lib Red Hat Prototype Pollution in minimist CVE-2020-7598 Public exploitFix available 5.6 MediumMarch 11, 2020
• python3-ovirt-engine-lib Red Hat Cross-Site Scripting in @novnc/novnc CVE-2017-18635 Public exploitFix available 6.1 MediumSeptember 25, 2019
• python3-ovirt-engine-lib Red Hat XML external entity injection in Terracotta Quartz Scheduler CVE-2019-13990 Public exploitFix available EPSS 16.6% 9.8 CriticalJuly 26, 2019
• python3-ovirt-engine-lib Red Hat Arbitrary Code Execution in handlebars CVE-2019-20920 Fix available 8.1 HighJune 5, 2019
• python3-ovirt-engine-lib Red Hat Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019