59797 matches found
Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release
The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...
Low: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release
The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...
Important: Red Hat Security Advisory: RHTAS 1.1.1 - Red Hat Trusted Artifact Signer Release
The 1.1.1 release of Red Hat Trusted Artifact Signer OpenShift Operator. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.1 The RHTAS Operator can be used with OpenShift Container Platform 4.14, 4.15, 4.16 and...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: PCI: Keystone: Fixed the if-statement expression in kspciequirk. This code accidentally used && where || was intended. This could potentially lead to a NULL derefrence error. Therefore, the if-statement expression should be...
PT-2025-6424
Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit versions up to and including 1.17.3 NVIDIA GPU Operator versions up to and including 24.9.1 Description NVIDIA Container Toolkit and NVIDIA GPU Operator are affected by a Time-of-Check Time-of-Use TOCTOU vulnerability...
CVE-2025-24970 vulnerabilities
Vulnerabilities for packages: neo4j, management-api-for-apache-cassandra-5.0, wavefront-proxy, cassandra-reaper, cloudwatch-exporter, docker-selenium, apache-activemq-artemis, druid, opensearch, tez, kserve-modelmesh, wildfly, seata, zookeeper, kafka, management-api-for-apache-cassandra-4.0,...
CVE-2025-24970 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, trino, apache-activemq-artemis, zookeeper, selenium, apache-nifi, keycloak, thingsboard, strimzi-kafka-operator, cassandra-reaper, opensearch, tez, druid, cloudwatch-exporter, celeborn, wildfly, flyway, kserve-modelmesh,...
CVE-2025-25193 vulnerabilities
Vulnerabilities for packages: wildfly, celeborn, keycloak...
CVE-2025-25193 vulnerabilities
Vulnerabilities for packages: zookeeper-fips, keycloak, wildfly, seata, knative-kafka-broker, celeborn...
GHSA-389X-839F-4RHX vulnerabilities
Vulnerabilities for packages: zookeeper-fips, keycloak, wildfly, seata, knative-kafka-broker, celeborn...
GHSA-389X-839F-4RHX vulnerabilities
Vulnerabilities for packages: wildfly, celeborn, keycloak...
GHSA-4G8C-WM8X-JFHW vulnerabilities
Vulnerabilities for packages: neo4j, management-api-for-apache-cassandra-5.0, wavefront-proxy, cassandra-reaper, cloudwatch-exporter, docker-selenium, apache-activemq-artemis, druid, opensearch, tez, kserve-modelmesh, wildfly, seata, zookeeper, kafka, management-api-for-apache-cassandra-4.0,...
GHSA-4G8C-WM8X-JFHW vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, trino, apache-activemq-artemis, zookeeper, selenium, apache-nifi, keycloak, thingsboard, strimzi-kafka-operator, cassandra-reaper, opensearch, tez, druid, cloudwatch-exporter, celeborn, wildfly, flyway, kserve-modelmesh,...
CVE-2022-41668
A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1...
CVE-2022-41666
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3 Hotfix 1 or prior, Pro-face...
CVE-2022-41671
A CWE-89: Improper Neutralization of Special Elements used in SQL Command ‘SQL Injection’ vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in execution of malicious code. Affected...
CVE-2022-41894
TensorFlow is an open source platform for machine learning. The reference kernel of the CONV3DTRANSPOSE TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result. Instead of dataptr += numchannels; it should be dataptr += outputnumchannels; as if the number of inp...
CVE-2022-41669
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal ExpertV3.3...
CVE-2022-32540
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras wi...