Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-03-25	CVE-2021-3941	In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. local low complexity openexr redhat fedoraproject debian	6.5
2022-03-23	CVE-2022-0996	Improper Authentication vulnerability in multiple products A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication. network low complexity redhat fedoraproject CWE-287	6.5
2022-03-16	CVE-2021-20257	An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. local low complexity qemu fedoraproject redhat debian	6.5
2022-03-10	CVE-2021-3660	Cockpit (and its plugins) do not seem to protect itself against clickjacking. network low complexity cockpit-project redhat	4.3
2022-03-10	CVE-2021-3733	Resource Exhaustion vulnerability in multiple products There's a flaw in urllib's AbstractBasicAuthHandler class. network low complexity python redhat fedoraproject netapp CWE-400	6.5
2022-03-03	CVE-2021-3602	Improper Cross-boundary Removal of Sensitive Data vulnerability in multiple products An information disclosure flaw was found in Buildah, when building containers using chroot isolation. local low complexity buildah-project redhat CWE-212	5.5
2022-03-03	CVE-2021-3620	Unspecified vulnerability in Redhat products A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. local low complexity redhat	5.5
2022-03-02	CVE-2021-3623	Out-of-bounds Write vulnerability in multiple products A flaw was found in libtpms. local low complexity libtpms-project redhat fedoraproject CWE-787	6.1
2022-03-02	CVE-2021-3631	A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. local high complexity redhat netapp	6.3
2022-03-02	CVE-2021-3667	An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. network low complexity redhat netapp	6.5