redhat-release-coreos vulnerabilities (Red Hat)
34 vulnerabilities.
-
redhat-release-coreosRed Hat Holes in EndpointSlice Validation Enable Host Network Hijack 2.7 Low -
redhat-release-coreosRed Hat It was found in OpenShift, before version 4.8, that the generated certificate for the in-cluster... 4.6 Medium -
redhat-release-coreosRed Hat The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key... 6.5 Medium -
redhat-release-coreosRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 attempts to allocate excessive memory (issue 2 of 2). 7.5 High -
redhat-release-coreosRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 acts as an Unintended Proxy or Intermediary. 5.3 Medium -
redhat-release-coreosRed Hat Go before 1.15.12 and 1.16.x before 1.16.5 allows injection. 7.3 High -
redhat-release-coreosRed Hat Validating Admission Webhook does not observe some previous fields 6.5 Medium -
redhat-release-coreosRed Hat golang.org/x/net/http/httpguts vulnerable to Uncontrolled Recursion 5.9 Medium -
redhat-release-coreosRed Hat mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs 8.5 High -
redhat-release-coreosRed Hat Cross-Site Request Forgery in Jenkins Credentials Plugin 6.1 Medium -
redhat-release-coreosRed Hat Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet 5.3 Medium -
redhat-release-coreosRed Hat Missing permission checks in Jenkins Config File Provider Plugin allow enumerating configuration file IDs 4.3 Medium -
redhat-release-coreosRed Hat CSRF vulnerability in Jenkins Config File Provider Plugin allows deleting configuration files 5.4 Medium -
redhat-release-coreosRed Hat Incorrect permission checks in Jenkins Config File Provider Plugin allow enumerating credentials IDs 6.5 Medium -
redhat-release-coreosRed Hat XML External Entity Reference vulnerability in Jenkins Config File Provider Plugin 8.1 High -
redhat-release-coreosRed Hat View name validation bypass in Jenkins 4.3 Medium -
redhat-release-coreosRed Hat Lack of type validation in agent related REST API in Jenkins 4.3 Medium -
redhat-release-coreosRed Hat Improper Locking in github.com/containers/storage 6.5 Medium -
redhat-release-coreosRed Hat Incorrect permission checks in Jenkins Matrix Authorization Strategy Plugin may allow accessing some items 6.5 Medium -
redhat-release-coreosRed Hat In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect... 6.5 Medium -
redhat-release-coreosRed Hat Stored XSS vulnerability in Jenkins on new item page 5.4 Medium -
redhat-release-coreosRed Hat Reflected XSS vulnerability in Jenkins markup formatter preview 6.1 Medium -
redhat-release-coreosRed Hat Missing permission check for paths with specific prefix in Jenkins 5.3 Medium -
redhat-release-coreosRed Hat Stored XSS vulnerability in Jenkins button labels 5.4 Medium -
redhat-release-coreosRed Hat Excessive memory allocation in graph URLs leads to denial of service in Jenkins 6.5 Medium -
redhat-release-coreosRed Hat Arbitrary file existence check in file fingerprints in Jenkins 4.3 Medium -
redhat-release-coreosRed Hat Path traversal vulnerability in Jenkins agent names 8.0 High -
redhat-release-coreosRed Hat Improper handling of REST API XML deserialization errors in Jenkins 8.0 High -
redhat-release-coreosRed Hat XSS vulnerability in Jenkins notification bar 5.4 Medium -
redhat-release-coreosRed Hat Arbitrary file read vulnerability in workspace browsers in Jenkins 6.5 Medium -
redhat-release-coreosRed Hat Improper Input Validation in GoGo Protobuf 8.6 High -
redhat-release-coreosRed Hat Withdrawn Advisory: Infinite loop in xz 7.5 High -
redhat-release-coreosRed Hat Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... 5.9 Medium -
redhat-release-coreosRed Hat Path Traversal in Buildah 8.8 High