CVE-2026-48864

CVE-2026-48864 affects libsolv. The issue is a heap buffer overflow during decompression of attacker-controlled data in .solv files, caused by insufficient input validation in repopagestore. This can lead to out-of-bounds memory access with potential information disclosure, alteration of program ...

CVE-2022-0718

The CVE-2022-0718 issue affects python-oslo.utils/oslo.utils where improper parsing causes passwords containing a double quote to be masked incorrectly in debug logs, exposing the portion after the quote. Impact is credential disclosure of sensitive data in logs (confidentiality impact stated by ...

CVE-2019-1003001

Summary (CVE-2019-1003001) : Jenkins Pipeline: Groovy Plugin 2.61 and earlier contains a sandbox bypass that lets attackers with Overall/Read permission supply a pipeline script via an HTTP endpoint, enabling arbitrary code execution on the Jenkins master JVM. The issue arises from unsafe script ...

CVE-2021-3696

CVE-2021-3696 = heap out-of-bounds write during Huffman table handling in grub2’s PNG reader, causing potential heap corruption. Affected: grub2 before patch grub-2.12; implications listed as Low/Low/Low in some sources, with potential for data corruption and, in theory, arbitrary code execution ...

CVE-2018-19477

CVE-2018-19477 relates to Artifex Ghostscript prior to 9.26, where a JBIG2Decode type confusion in psi/zfjbig2.c allows remote attackers to bypass access restrictions by sending specially crafted input. Public disclosures in multiple sources (e.g., Debian/Red Hat advisories, IBM PowerKVM bulletin...

CVE-2018-12022

CVE-2018-12022 affects FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (globally or for a property) and the service classpath contains the Jodd‑db jar (for Jodd DB access) with an LDAP service available, an attacker can trigger remote code executio...

CVE-2021-3697

CVE-2021-3697 is a grub2 JPEG handling vulnerability where crafting a JPEG image may cause a heap underflow in the JPEG reader, enabling data corruption and potentially code execution or secure-boot circumvention. It affects grub2 versions prior to the fixed release (notably legacy references to ...

CVE-2026-4408

CVE-2026-4408 : Samba remotely executes code due to a misconfiguration in the “check password script” feature when the script uses the %u substitution. The client-supplied username is passed with insufficient escaping of shell meta-characters, enabling remote command execution on affected systems...

CVE-2021-3344

Summary: CVE-2021-3344 is a privilege-escalation flaw in OpenShift builder. During image build, credentials outside the build context can be automatically mounted into the container under construction. If an attacker can execute code during build inside the container, they can reuse those credent...

CVE-2025-6021

Affects libxml2: multiple vendors report CVE-2025-6021 (integer overflow in xmlBuildQName causing stack-based buffer overflow). Documents show vulnerable libxml2 variants across distributions (e.g., AWS ALAS advisories for libxml2 with 2.9/2.10 lines; AIX advisory listing affected filesets; Astra...

CVE-2022-4361

CVE-2022-4361 affects Keycloak’s SAML and OIDC providers, with a cross-site scripting (XSS) vulnerability that can be triggered by setting the AssertionConsumerServiceURL value or the redirect_uri. The connected sources consistently describe XSS in the SAML/OIDC flows and the ability to cause mal...

CVE-2018-12115

CVE-2018-12115 is an out-of-bounds write in Node.js Buffer when using UCS-2/UTF-16LE encodings. Affected: all Node.js versions before 6.14.4, 8.11.4, and 10.9.0. Impact: writes starting near the buffer end can miscalculate max input length, enabling memory writes outside the buffer and potentiall...

CVE-2019-1003002

CVE-2019-1003002 is a Jenkins sandbox bypass in Pipeline: Declarative Plugin

CVE-2022-27652

CVE-2022-27652 relates to a security regression in cri-o/OpenShift container components where containers could be started with inheritable capabilities improperly. The Red Hat advisories note that the issue involves adding the fix for CVE-2022-27652 to certain OpenShift releases, and that older O...

CVE-2024-1725

The CVE-2024-1725 issue affects kubevirt-csi in OpenShift Virtualization’s Hosted Control Plane (HCP): an authenticated attacker can create a PersistentVolume that matches a worker node name to access the root HCP worker node’s volume. Exploitation is described in multiple advisories, with OpenSh...

CVE-2026-4878

CVE-2026-4878 is a libcap TOCTOU race condition in cap_set_file() that could let a local attacker with write access to a parent directory inject or strip capabilities from executables, enabling privilege escalation. The connected advisories cite a fix in libcap (openSUSE openSUSE-SU-2026:20613-1;...

CVE-2018-19476

Artifex Ghostscript before 9.26 contains a setcolorspace type confusion in psi/zicc.c that lets remote attackers bypass access restrictions. Affected: Ghostscript versions prior to 9.26 (e.g., 9.25 and earlier per advisories). Impact per sources ranges from information disclosure to potential cod...

CVE-2018-13033

CVE-2018-13033 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils 2.30, enabling an attacker to cause a denial of service (excessive memory allocation and crash) via a crafted ELF file during nm execution. Connected advisories confirm a fix path through updates to binutils ...

CVE-2024-12086

The CVE-2024-12086 entry concerns rsync. A flaw in rsync’s checksum-based comparison during client→server file transfer can enable a server to enumerate contents of files on the client by sending crafted checksum values and analyzing responses. The connected documents confirm rsync is affected an...

CVE-2023-1668

CVE-2023-1668 — Open vSwitch (OVS) has a flaw where, when processing an IP packet with protocol 0, OVS installs a datapath flow whose action does not modify the IP header. This can cause a datapath rule matching all IP protocols (nw_proto wildcarded) to have an incorrect action, risking improper ...

CVE-2017-12195

The CVE-2017-12195 vulnerability affects OpenShift platforms (OpenShift Container Platform/Enterprise) using the openshift elasticsearch plugin. Affected: OpenShift Enterprise/Container Platform 3.x with Elasticsearch; root cause is an authentication bypass where an attacker who knows the authent...

CVE-2019-10176

OpenShift Container Platform 3.11 and later is affected by CVE-2019-10176, where CSRF tokens used by the cluster console component remain static during a user session. An attacker who can observe the token value could reuse it to perform a CSRF attack. Red Hat advisories RHSA-2019:4053 and RHSA-2...

CVE-2022-3466

CVE-2022-3466 refers to an issue in Red Hat OpenShift Container Platform where the RHCOS/OpenShift package updates shipped with 4.9.48, 4.10.31, and 4.11.6 contained an incorrect cri-o version that did not include the fix for CVE-2022-27652. The vulnerability could allow an attacker with access t...

CVE-2024-4629

The CVE-2024-4629 issue is a brute-force protection bypass in Keycloak/Red Hat Single Sign-On 7.6.10 (and related builds). A timing-based flaw lets parallel login attempts exceed configured failed-attempt limits before lockout, enabling more password guesses. Red Hat has patched this in RHSA advi...

CVE-2024-50312

CVE-2024-50312 is an Information Disclosure via GraphQL Introspection vulnerability in OpenShift. The connected Red Hat advisory notes that OpenShift Container Platform 4.x releases including 4.16.30 and 4.17.12 were patched to fix this issue, which allowed unauthorized users to enumerate availab...

CVE-2015-8103

CVE-2015-8103 affects Jenkins CLI deserialization in the Jenkins core prior to 1.638 (and LTS prior to 1.625.2). A crafted serialized Java object can trigger remote code execution via a vulnerable commons-collections library and the Groovy variant in ysoserial. Impact is remote code execution wit...

CVE-2019-1003049

CVE-2019-1003049 affects Jenkins core where an incomplete fix for security advisory SECURITY-901 left remoting-based CLI authentication caches valid in Jenkins versions prior to 2.172 (and LTS prior to 2.164.2). Affected products/versions: Jenkins and LTS builds older than 2.172 and 2.164.2 respe...

CVE-2025-5318

CVE-2025-5318 : A flaw in libssh before 0.11.2 allows an authenticated remote attacker to trigger an out-of-bounds read in sftp_handle() due to an incorrect comparison, potentially reading memory beyond the valid handle list and returning an invalid pointer. Documented impacts include confidentia...

CVE-2019-1003004

CVE-2019-1003004 affects Jenkins core (including 2.158 and earlier, LTS 2.150.1 and earlier) due to an improper authorization issue in AuthenticationProcessingFilter2.java that can extend an active HTTP session indefinitely, potentially for a user whose account was deleted. The connected records ...

CVE-2022-1677

In OpenShift Container Platform, CVE-2022-1677 arises when a user with Route-creation/modification permissions can craft a payload that inserts a malformed entry into the cluster router’s HAProxy configuration. This can cause the router to hijack traffic by matching arbitrary hostnames and redire...

CVE-2026-12725

CVE-2026-12725 affects dnsmasq. The flaw is a heap-based buffer overflow in the log_query() path when DNSSEC validation and query logging are both enabled and DNS responses contain DS/DNSKEY records with unsupported algorithm or digest types. This can cause dnsmasq to write past the end of an int...

CVE-2025-6170

CVE-2025-6170 affects libxml2’s xmllint interactive shell. A stack-based buffer overflow in the command-parsing logic can cause crashes and, in rare configurations, may allow code execution. Related connected documents show patches/updates across distributions: Debian LTS advisory and Debian secu...

CVE-2019-1003050

CVE-2019-1003050 affects Jenkins core UI: the f:validateButton form control did not properly escape job URLs, enabling a cross-site scripting (XSS) vulnerability. Vulnerable in Jenkins versions 2.171 and earlier and Jenkins LTS 2.164.1 and earlier; exploit requires a user with the ability to cont...

CVE-2026-1933

Samba CVE-2026-1933 involves missing SMB-layer access checks for NTFS-style reparse points on read-only = yes shares. Authenticated users with underlying filesystem write permissions can create or delete reparse point metadata via SMB, potentially altering SMB-visible file behavior (e.g., convert...

CVE-2019-11244

CVE-2019-11244 affects Kubernetes kubectl caching: in Kubernetes v1.8.x–v1.14.x, schema info is cached in a world-writable directory by default at --cache-dir (often $HOME/.kube/http-cache). If the cache-dir is accessible to other users, files may be modified and disrupt kubectl invocation. Publi...

CVE-2026-6846

CVE-2026-6846 describes a heap-buffer-overflow in GNU binutils during linking when processing a specially crafted XCOFF object file. The vulnerability affects the XCOFF handling code, where a crafted file can trigger arbitrary code execution or a denial of service. The advisory notes local exploi...

CVE-2020-10763

The CVE-2020-10763 issue concerns Heketi before 10.1.0 where sensitive data (gluster-block passwords) can be disclosed via logs. The flaw requires local access to the Heketi server and arises from how logging is performed, allowing an attacker to read password details in logs. Public advisories r...

CVE-2022-1706

CVE-2022-1706 affects Ignition where ignition configs can be accessed from unprivileged containers in VMs running on VMware products, exposing potential data confidentiality risk when secrets are present. Public documentation in connected advisories notes the fix came with newer ignition releases...

CVE-2026-1784

CVE-2026-1784 affects the Route OpenShift resource (OpenShift route definitions using HAProxy) where checks on the spec.path YAML stanza are insufficient, allowing controlled injection of the HAProxy configuration. The CVE description and linked records indicate this can lead to remote code execu...

CVE-2023-6476

CRI-O contains a vulnerability where an experimental annotation can cause a container to be unconfined on cgroupv2, allowing a pod to request any memory/CPU and potentially trigger node DoS. Publicly detailed in CVE-2023-6476; multiple advisories reference this issue in OpenShift/RHEL deployments...

CVE-2019-10384

CVE-2019-10384 affects Jenkins 2.191 and earlier (and OpenShift/Jenkins packages on RHEL/CentOS) where CSRF tokens could be created without a valid session, allowing an anonymous user to bypass CSRF protection. Affected versions include the 2.191 and earlier line and the LH 2.176.2 and earlier LT...

CVE-2020-1741

CVE-2020-1741 affects OpenShift Container Platform 3.11 via openshift-ansible, where CORS allowed origins are configured too permissively during installation. This enables a MITM between a user’s browser and the OpenShift console to facilitate phishing, with confidentiality as the main risk. Publ...

CVE-2025-5915

CVE-2025-5915 refers to a heap-based memory issue in the libarchive library caused by a filter block size potentially exceeding the LZSS window, which can lead to reading beyond the allocated buffer and cause crashes or memory disclosure. The connected documents indicate this affects libarchive a...

CVE-2023-5366

CVE-2023-5366 affects Open vSwitch. The flaw allows ICMPv6 Neighbor Advertisement packets between VMs to bypass OpenFlow rules, enabling a local attacker to craft packets with a spoofed target IP to redirect ICMPv6 traffic. Connected advisories confirm patched/Open vSwitch versions are available ...

CVE-2025-32988

GnuTLS contains a double-free vulnerability (CVE-2025-32988) in SAN export logic for otherName when the type-id OID is invalid or malformed, leading to asn1_delete_structure() on a non-owned node and potential memory corruption or DoS. Public GnuTLS APIs can trigger it; impact is memory corruptio...

CVE-2023-4066

Red Hat AMQ Broker is affected by CVE-2023-4066. The issue involves passwords stored in a secret security-properties-prop-module (defined in ActivemqArtemisSecurity) that are displayed in plaintext in the StatefulSet YAML of AMQ Broker. The flaw originates from how secrets are surfaced for displa...

CVE-2020-10712

OpenShift Container Platform (OCP) versions 4.1 and later are affected by CVE-2020-10712, where the image registry operator logs can disclose sensitive information, allowing an attacker with access to those logs to read/write to the storage backing the internal image registry. Impact is primarily...

CVE-2024-3056

CVE-2024-3056 affects Podman. A flaw allows a container that shares IPC with another to create a large number of IPC resources in /dev/shm, exhaust memory, and trigger a memory-based denial of service. The resources remain tied to the IPC namespace even after the container is removed, and a resta...

CVE-2022-0669

CVE-2022-0669 describes a denial-of-service flaw in DPDK’s vhost-user handling. A malicious vhost-user master can attach an unexpected number of file descriptors as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages not closed by the vhost-user slave, exhausting fd...

CVE-2025-32990

CVE-2025-32990 is a GnuTLS issue affecting certtool template parsing. A heap-buffer-overflow (off-by-one) can cause an out-of-bounds write to a NULL pointer, leading to memory corruption and a potential denial-of-service. The connected advisories confirm the vulnerability in GnuTLS and reference ...