Skip to contentUnspecified vulnerabilities
Newest
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats...CVE-2018-10904Fix available8.8 High
- gluster glusterfs, debian linux +1 moreglusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster...CVE-2018-10841Fix available6.6 Medium
- postgresql, opensuse leap +1 morepostgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog...CVE-2018-1115Fix available4.2 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreLinux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...CVE-2018-1130Fix available5.5 Medium
- jenkinsCross-site Scripting in JenkinsCVE-2017-2601Fix available6.1 Medium
- unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...CVE-2018-1089Fix available7.5 High
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in JenkinsCVE-2017-2606Fix available4.3 Medium
- jenkins, redhat openshift +1 moreIncorrect Authorization in Jenkins CoreCVE-2017-2611Fix available4.3 Medium
- hawt hawtioPath Traversal in io.hawt:projectCVE-2017-2594Fix available5.4 Medium
- ovirt, unspecified ovirt-engine, redhat enterprise virtualization +2 moreovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to...CVE-2018-1074Fix available7.7 High
- openstack puppet-swift, redhat openstack +1 morepuppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat...CVE-2016-9590Fix available6.5 Medium
- gluster glusterfsglusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option...CVE-2018-1112Fix available8.0 High
- openstack puppet-tripleo, redhat openstack +1 morepuppet-tripleo before versions 5.5.0, 6.2.0 is vulnerable to an access-control flaw in the...CVE-2016-9599Fix available7.1 High
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...CVE-2018-1088Public exploitFix available8.1 High
- red hat undertow, redhat jboss enterprise application platform, jboss fuse +1 more +3 moreIncorrect Authorization in UndertowCVE-2017-12196Fix available4.8 Medium
- theforeman foreman, unspecified foreman-debug, redhat satellite +2 moreforeman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An...CVE-2016-95934.7 Medium
- redhat openshiftopenshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to...CVE-2016-95924.3 Medium
- redhat pcs, clusterlabs pacemaker command line interface, redhat enterprise linux +2 morepcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user...CVE-2018-1079Fix available8.7 High
- corosync, canonical ubuntu linux, debian linux +1 more +3 morecorosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.CVE-2018-1084Fix available7.5 High
- ansible, redhat openstack +1 moreAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systemsCVE-2016-9587Public exploitFix availableEPSS 17.0%6.6 Medium
- gluster glusterfsA flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in...CVE-2017-15096Fix available3.3 Low
- openstack oslo.middleware, unspecified python-oslo-middleware, canonical ubuntu linux +2 moreoslo.middleware Information Disclosure vulnerabilityCVE-2017-2592Fix available5.9 Medium
- fedoraproject 389 directory server, unspecified 389-ds-base, redhat enterprise linux +2 more389-ds-base before version 1.3.6 is vulnerable to an improperly NULL terminated array in the...CVE-2017-2591Fix available3.7 Low
- qemu, debian linux +1 moreQemu before version 2.9 is vulnerable to an improper link following when built with the VirtFS. A...CVE-2016-9602Fix available7.6 High
- artifex ghostscript, gpl ghostscript, jbig2dec +1 more +3 moreghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in...CVE-2016-9601Fix available5.3 Medium
- curlcurl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal...CVE-2016-9594Fix available6.5 Medium