Vulnerabilities > Redhat

DATE CVE VULNERABILITY TITLE RISK
2024-07-24 CVE-2024-7079 Missing Authentication for Critical Function vulnerability in Redhat Openshift Container Platform 3.11/4.0
A flaw was found in the Openshift console.
network
low complexity
redhat CWE-306
6.5
2024-07-17 CVE-2024-6535 Improper Authentication vulnerability in Redhat Service Interconnect 1.0
A flaw was found in Skupper.
network
low complexity
redhat CWE-287
5.3
2024-07-09 CVE-2024-6237 Unspecified vulnerability in Redhat products
A flaw was found in the 389 Directory Server.
network
low complexity
redhat
6.5
2024-07-05 CVE-2024-6505 Out-of-bounds Read vulnerability in multiple products
A flaw was found in the virtio-net device in QEMU.
network
low complexity
qemu redhat CWE-125
6.8
2024-07-01 CVE-2024-6387 Race Condition vulnerability in multiple products
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
8.1
2024-06-21 CVE-2024-6239 A flaw was found in the Poppler's Pdfinfo utility.
network
low complexity
freedesktop redhat
7.5
2024-06-06 CVE-2024-3049 Insufficient Verification of Data Authenticity vulnerability in multiple products
A flaw was found in Booth, a cluster ticket manager.
network
high complexity
clusterlabs redhat CWE-345
5.9
2024-06-05 CVE-2024-5037 Authentication Bypass by Spoofing vulnerability in Redhat products
A flaw was found in OpenShift's Telemeter.
network
low complexity
redhat CWE-290
7.5
2024-06-05 CVE-2024-3716 Unspecified vulnerability in Redhat Satellite 6.0
A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter.
local
low complexity
redhat
6.2
2024-06-05 CVE-2024-4812 Cross-site Scripting vulnerability in multiple products
A flaw was found in the Katello plugin for Foreman, where it is possible to store malicious JavaScript code in the "Description" field of a user.
network
low complexity
redhat katello-project CWE-79
4.8