rhvm vulnerabilities (Red Hat)
43 vulnerabilities.
-
rhvmRed Hat Ovirt: authentication bypass 7.5 High -
rhvmRed Hat TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 4.7 Medium -
rhvmRed Hat A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log... 6.5 Medium -
rhvmRed Hat sosreport Exposure of Sensitive Information vulnerability 5.5 Medium -
rhvmRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
rhvmRed Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
rhvmRed Hat SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
rhvmRed Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
rhvmRed Hat Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High -
rhvmRed Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
rhvmRed Hat Improper Output Neutralization for Logs in Spring Framework 4.3 Medium -
rhvmRed Hat XSS in the `of` option of the `.position()` util 6.5 Medium -
rhvmRed Hat XSS in `*Text` options of the Datepicker widget 6.5 Medium -
rhvmRed Hat XSS in the `altField` option of the Datepicker widget 6.5 Medium -
rhvmRed Hat Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
rhvmRed Hat Regular Expression Denial of Service (ReDoS) 5.3 Medium -
rhvmRed Hat ReDoS in normalize-url 7.5 High -
rhvmRed Hat Arbitrary Code Injection 3.3 Low -
rhvmRed Hat Prototype Pollution 7.5 High -
rhvmRed Hat A flaw was found in all released versions of m2crypto, where they are vulnerable to... 5.9 Medium -
rhvmRed Hat A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other... 6.5 Medium -
rhvmRed Hat Prototype Pollution 7.3 High -
rhvmRed Hat XML External Entity (XXE) Injection in Jackson Databind 7.5 High -
rhvmRed Hat Regular Expression Denial of Service in Handlebars 7.5 High -
rhvmRed Hat Cross-site scripting in bootstrap-select 6.1 Medium -
rhvmRed Hat An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it... 5.3 Medium -
rhvmRed Hat A flaw was found in Ovirt Engine's web interface in ovirt 4.4 and earlier, where it did not... 6.3 Medium -
rhvmRed Hat Prototype Pollution in lodash 7.4 High -
rhvmRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
rhvmRed Hat jQuery has a potential XSS vulnerability 6.9 Medium -
rhvmRed Hat A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization... 5.4 Medium -
rhvmRed Hat Prototype Pollution in minimist 5.6 Medium -
rhvmRed Hat A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub... 3.1 Low -
rhvmRed Hat Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT 9.8 Critical -
rhvmRed Hat Cross-Site Scripting in @novnc/novnc 6.1 Medium -
rhvmRed Hat Insecure Deserialization in Apache Commons Beanutils 7.3 High -
rhvmRed Hat XML external entity injection in Terracotta Quartz Scheduler 9.8 Critical -
rhvmRed Hat Arbitrary Code Execution in handlebars 8.1 High -
rhvmRed Hat It was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is... 6.5 Medium -
rhvmRed Hat Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
rhvmRed Hat ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log... 5.0 Medium -
rhvmRed Hat ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db... 5.0 Medium -
rhvmRed Hat linux-4.9 - security update 5.5 Medium