Aller au contenu

Vulnérabilités de Red Hat Red Hat Ceph Storage 7

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-18495 Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough 6.1 Moyenne 11 sept. 2026
CVE-2026-41567 Moby is an open source container framework 7.2 Élevée 5 juin 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2026-33814 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it… 7.5 Élevée 7 mai 2026
CVE-2026-42154 Prometheus is an open-source monitoring system and time series database 7.5 Élevée 4 mai 2026
CVE-2026-42151 Prometheus is an open-source monitoring system and time series database 7.5 Élevée 4 mai 2026
CVE-2026-27459 pyOpenSSL is a Python wrapper around the OpenSSL library 7.2 Élevée 17 mars 2026
CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query 7.5 Élevée 28 janv. 2026
CVE-2026-21720 Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image 7.5 Élevée 27 janv. 2026
CVE-2025-56005 An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via… 9.8 Critique 20 janv. 2026
CVE-2025-14104 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 6.1 Moyenne 5 déc. 2025
CVE-2025-14010 A flaw was found in ansible-collection-community-general 5.5 Moyenne 4 déc. 2025
CVE-2025-11561 Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems 8.8 Élevée 9 oct. 2025
CVE-2025-6395 Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() 6.5 Moyenne 10 juil. 2025
CVE-2025-32990 Gnutls: vulnerability in gnutls certtool template parsing 6.5 Moyenne 10 juil. 2025
CVE-2025-32989 Gnutls: vulnerability in gnutls sct extension parsing 5.3 Moyenne 10 juil. 2025
CVE-2025-32988 Gnutls: vulnerability in gnutls othername san export 6.5 Moyenne 10 juil. 2025
CVE-2025-4598 Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump 4.7 Moyenne 30 mai 2025
CVE-2024-11831 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 5.4 Moyenne 10 févr. 2025
CVE-2024-6387 A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd) 8.1 Élevée 1 juil. 2024

Autres produits Red Hat