receptor vulnerabilities (Red Hat)
172 vulnerabilities.
receptorRed HatVerify panics on certificates with an unknown public key algorithm in crypto/x5095.9 MediumreceptorRed HatRegular expression denial-of-service in Django5.3 MediumreceptorRed Hatcryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override7.5 HighreceptorRed HatDjango denial-of-service attack in the intcomma template filter7.5 HighreceptorRed Hataiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal5.9 MediumreceptorRed Hataiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators6.5 MediumreceptorRed HatJinja vulnerable to Cross-Site Scripting (XSS)5.4 MediumreceptorRed Hatquic-go's path validation mechanism can cause denial of service6.4 MediumreceptorRed HatDenial of service via chunk extensions in net/http5.3 MediumreceptorRed Hatcryptography vulnerable to NULL-dereference when loading PKCS7 certificates5.9 MediumreceptorRed HatRequest smuggling in aiohttp5.3 MediumreceptorRed HatAxios Cross-Site Request Forgery Vulnerability6.5 MediumreceptorRed Hattwisted.web has disordered HTTP pipeline response5.3 MediumreceptorRed HatMercurial configuration injectable in repo revision when installing via pip5.5 MediumreceptorRed HatHTTP/2 rapid reset can cause excessive work in net/http7.5 HighreceptorRed HatArbitrary Code Execution in Pillow8.1 HighreceptorRed HatPanic when processing post-handshake message on QUIC connections in crypto/tls7.5 HighreceptorRed HatMemory exhaustion in QUIC connection handling in crypto/tls7.5 HighreceptorRed HatGitPython blind local file inclusion4.0 MediumreceptorRed HatLarge RSA keys can cause high CPU usage in crypto/tls5.3 MediumreceptorRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighreceptorRed HatAn account takeover flaw was found in Red Hat Satellite 6.7.2 onward. A potential attacker with...7.5 HighreceptorRed HatA flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets...5.5 MediumreceptorRed HatA flaw was found in Red Hat Satellite's Job Invocation, where the "User Input" entry was not...6.5 MediumreceptorRed HatGeneration of Error Message Containing Sensitive Information in RESTEasy client5.3 MediumreceptorRed HatXSS in Action View5.4 MediumreceptorRed HatA flaw was found in Red Hat Satellite 6 which allows privileged attacker to read cache files....8.8 HighreceptorRed HatUntrusted users can run pending migrations in production in Rails6.5 MediumreceptorRed HatCSRF Vulnerability in rails-ujs6.5 MediumreceptorRed HatRack allows Percent-encoded cookies to overwrite existing prefixed cookie names7.5 HighreceptorRed HatDeserialization of untrusted data in Jackson Databind8.1 HighreceptorRed HatDeserialization of untrusted data in Jackson Databind8.1 HighreceptorRed HatDeserialization of untrusted data in Jackson Databind8.1 HighreceptorRed HatRegular Expression Denial of Service in websocket-extensions (RubyGem)7.5 HighreceptorRed HatAbility to forge per-form CSRF tokens in Rails4.3 MediumreceptorRed HatCircumvention of file size limits in ActiveStorage7.5 HighreceptorRed HatPossible Strong Parameters Bypass in ActionPack7.5 HighreceptorRed HatActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore9.8 CriticalreceptorRed HatDirectory traversal in Rack::Directory app bundled with Rack8.6 HighreceptorRed HatImproper Input Validation in Hibernate Validator5.3 MediumreceptorRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.1 HighreceptorRed HatDenial of Service in Netty7.5 HighreceptorRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighreceptorRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 HighreceptorRed HatPossible XSS vulnerability in ActionView4.0 MediumreceptorRed HatPuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 HighreceptorRed HatSQL injection in Django8.8 HighreceptorRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalreceptorRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 CriticalreceptorRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Critical- Show moreLoading…