Vulnerabilities > Redhat > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-08-26 CVE-2022-0207 A race condition was found in vdsm.
local
high complexity
ovirt redhat
4.7
2022-08-26 CVE-2022-0225 Cross-site Scripting vulnerability in Redhat Keycloak and Single Sign-On
A flaw was found in Keycloak.
network
low complexity
redhat CWE-79
5.4
2022-08-26 CVE-2022-34301 A flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01.
local
low complexity
kidan redhat microsoft
6.7
2022-08-26 CVE-2022-34302 A flaw was found in New Horizon Datasys bootloaders before 2022-06-01.
local
low complexity
horizondatasys redhat microsoft
6.7
2022-08-26 CVE-2022-34303 A flaw was found in Eurosoft bootloaders before 2022-06-01.
local
low complexity
eurosoft-uk redhat microsoft
6.7
2022-08-26 CVE-2021-35939 It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created.
local
low complexity
rpm redhat
6.7
2022-08-26 CVE-2021-3669 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
A flaw was found in the Linux kernel.
local
low complexity
linux ibm debian fedoraproject redhat CWE-770
5.5
2022-08-26 CVE-2021-3688 Unspecified vulnerability in Redhat Jboss Core Services Httpd 2.4.23/2.4.29/2.4.37
A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a request URL contains dot-dot-semicolon(s).
network
high complexity
redhat
4.8
2022-08-26 CVE-2021-3754 Unspecified vulnerability in Redhat Keycloak and Single Sign-On
A flaw was found in keycloak where an attacker is able to register himself with the username same as the email ID of any existing user.
network
low complexity
redhat
5.3
2022-08-26 CVE-2021-3856 Path Traversal vulnerability in Redhat Keycloak
ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader.
network
low complexity
redhat CWE-22
4.3