Aller au contenu

Vulnérabilités de Red Hat Red Hat Ceph Storage 8

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-18495 Libtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough 6.1 Moyenne 11 sept. 2026
CVE-2026-41567 Moby is an open source container framework 7.2 Élevée 5 juin 2026
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Moyenne 2 juin 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critique 22 mai 2026
CVE-2026-33814 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it… 7.5 Élevée 7 mai 2026
CVE-2026-42154 Prometheus is an open-source monitoring system and time series database 7.5 Élevée 4 mai 2026
CVE-2026-42151 Prometheus is an open-source monitoring system and time series database 7.5 Élevée 4 mai 2026
CVE-2025-48431 Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings Non notée 28 avr. 2026
CVE-2026-27459 pyOpenSSL is a Python wrapper around the OpenSSL library 7.2 Élevée 17 mars 2026
CVE-2025-12801 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 6.5 Moyenne 4 mars 2026
CVE-2026-25646 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network… 8.3 Élevée 10 févr. 2026
CVE-2025-14831 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 5.3 Moyenne 9 févr. 2026
CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query 7.5 Élevée 28 janv. 2026
CVE-2026-21721 The dashboard permissions API does not verify the target dashboard scope and only checks the dashboards.permissions:*… 8.1 Élevée 27 janv. 2026
CVE-2026-21720 Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image 7.5 Élevée 27 janv. 2026
CVE-2025-9820 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11… 4.0 Moyenne 26 janv. 2026
CVE-2025-13465 The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution 6.9 Moyenne 21 janv. 2026
CVE-2025-56005 An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via… 9.8 Critique 20 janv. 2026
CVE-2026-23490 pyasn1 is a generic ASN.1 library for Python 7.5 Élevée 16 janv. 2026
CVE-2026-21441 urllib3 is an HTTP client library for Python 8.9 Élevée 7 janv. 2026
CVE-2025-14874 A flaw was found in Nodemailer 7.5 Élevée 18 déc. 2025
CVE-2025-14104 Util-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernames 6.1 Moyenne 5 déc. 2025
CVE-2025-14010 A flaw was found in ansible-collection-community-general 5.5 Moyenne 4 déc. 2025
CVE-2025-13601 Glib: integer overflow in in g_escape_uri_string() 7.7 Élevée 26 nov. 2025
CVE-2025-13033 A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient… 7.5 Élevée 14 nov. 2025

Autres produits Red Hat