Skip to contentRedhat Openshift vulnerabilities
- openshift haproxy cartridge haproxy cartridge, redhat openshift +1 moreOpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate...CVE-2013-01635.5 Medium
- openshift cartridge cartridge, redhat openshift +1 moreOpenShift cartridge allows remote URL retrievalCVE-2013-21038.1 High
- red hat openshift, redhat openshift container platform +1 moreSensitive Data Exposure in Openshift Container PlatformCVE-2019-102135.3 Medium
- kubernetes cri-o, fedoraproject fedora, redhat openshift container platform +2 moreA flaw was found in cri-o, as a result of all pod-related processes being placed in the same...CVE-2019-14891Fix available5.0 Medium
- [unknown] infinispan, netapp active iq unified manager, redhat fuse +4 more +6 moreUse of Externally-Controlled Input to Select Classes or Code in InfinispanCVE-2019-10174Fix available7.5 High
- redhat openshift origin, rubygem-openshift-origin-node +1 moreopenshift-origin-node Improper Input Validation vulnerabilityCVE-2014-00845.5 Medium
- phusion passenger, redhat openshift, ruby-passenger +2 moreRubyGems passenger gem allows remote attackers to delete filesCVE-2012-6135Fix available7.5 High
- openshiftOpenShift: Install script has temporary file creation vulnerability which can result in arbitrary...CVE-2014-00237.8 High
- openshift origin origin, redhat openshift origin +1 moreOpenShift Origin: Improperly validated team names could allow stored XSS attacksCVE-2014-35926.1 Medium
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...CVE-2018-12207Fix available6.5 Medium
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- kubernetes kube-state-metrics, redhat openshift container platform +1 morekube-state-metrics may expose secret content in metricsCVE-2019-10223Fix available5.3 Medium
- redhat openshift, openshift mongodb cartridge mongodb cartridge +1 morecartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly...CVE-2013-01657.3 High
- kubernetes, redhat openshift container platform +1 moreKubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attackCVE-2019-11253Fix availableEPSS 25.9%7.5 High
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...CVE-2019-14287Public exploitFix availableEPSS 63.8%8.8 High
- red hat openshiftA vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container image, bypass the TLS hostname verification. An attacker can take advantage of this f…CVE-2019-148455.7 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +4 more +6 morePotential to access user credentials from the log files when debug logging enabledCVE-2019-10212Fix available4.8 Medium
- golang go, debian linux, fedoraproject fedora +6 more +8 moreGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.CVE-2019-16276Fix available7.5 High
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runcCVE-2019-16884Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreA buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's...CVE-2019-14835Fix available7.2 High
- buildah project buildah, redhat enterprise linux, openshift container platform +3 more +5 morecontainers/image library Insufficiently Protects CredentialsCVE-2019-10214Fix available6.4 Medium
- f5 container ingress service, redhat openshift +1 moreOn version 1.9.0, If DEBUG logging is enable, F5 Container Ingress Service (CIS) for Kubernetes...CVE-2019-66484.4 Medium
- systemd project systemd, fedoraproject fedora, redhat enterprise linux +11 more +13 moreIn systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by...CVE-2019-15718Fix available4.4 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes client-go logs authorization headers at debug verbosity levelsCVE-2019-11250Fix available4.7 Medium
- kubernetes, redhat openshift container platform +1 morekubectl cp allows symlink directory traversalCVE-2019-11249Fix available4.8 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes kube-apiserver allows access to custom resources via wrong scopeCVE-2019-11247Fix available5.0 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreCross-Site Request Forgery in JenkinsCVE-2019-10384Fix available8.8 High
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-10383Fix available4.8 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in, ghostscript versions prior to 9.28, in the .pdfexectoken and other...CVE-2019-14817Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreA flaw was found in ghostscript, versions 9.x before 9.28, in the setsystemparams procedure where...CVE-2019-14813Fix availableEPSS 11.0%7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +2 more +4 moreA flaw was found in, ghostscript versions prior to 9.28, in the .pdf_hook_DSC_Creator procedure...CVE-2019-14811Public exploitFix available7.3 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 25.4%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 82.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- redhat openshift container platform, red hat atomic-openshift +1 moreA flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF...CVE-2019-101764.2 Medium
- red hat atomic-openshift, redhat openshift +1 moreA vulnerability exists in the garbage collection mechanism of atomic-openshift. An attacker able...CVE-2019-38843.6 Low
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\, redhat openshift container platform +2 moreMissing Authorization in Jenkins Pipeline: Shared Groovy Libraries PluginCVE-2019-10357Fix available4.3 Medium
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreReturn of Pointer Value Outside of Expected Rang in Jenkins Script Security PluginCVE-2019-10356Fix available8.8 High
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreIncorrect Privilege Assignment in Jenkins Script Security PluginCVE-2019-10355Fix available8.8 High
- red hat openshift, redhat openshift container platform +1 moreOpenShift Container Platform before version 4.1.3 writes OAuth tokens in plaintext to the audit...CVE-2019-101652.3 Low
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379Fix available9.8 Critical
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreUndertow Missing Authorization when requesting a protected directory without trailing slashCVE-2019-10184Fix available5.3 Medium
- gnome pango, canonical ubuntu linux, debian linux +10 more +12 moreGnome Pango 1.42 and later is affected by: Buffer Overflow. The impact is: The heap based buffer...CVE-2019-1010238Fix available9.8 Critical
- jenkins, redhat openshift container platform +1 moreMissing Authorization in JenkinsCVE-2019-10354Fix available4.3 Medium
- redhat openshift container platform, red hat atomic-openshift +1 moreA reflected XSS vulnerability exists in authorization flow of OpenShift Container Platform...CVE-2019-3889Fix available4.6 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreCredential exposure through log files in UndertowCVE-2019-3888Fix available5.3 Medium
- Show moreLoading…