Aller au contenu

Vulnérabilités de Red Hat Red Hat Discovery 2

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-44495 Axios is a promise based HTTP client for the browser and Node.js 7.0 Élevée 11 juin 2026
CVE-2026-44494 Axios is a promise based HTTP client for the browser and Node.js 8.7 Élevée 11 juin 2026
CVE-2026-44492 Axios is a promise based HTTP client for the browser and Node.js 8.6 Élevée 11 juin 2026
CVE-2026-46625 JavaScript Cookie is a JavaScript API for handling cookies, client-side 7.5 Élevée 10 juin 2026
CVE-2025-71319 image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block… 8.7 Élevée 9 juin 2026
CVE-2026-45447 Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7… Non notée 9 juin 2026
CVE-2026-11332 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 Élevée 5 juin 2026
CVE-2026-34993 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 6.4 Moyenne 2 juin 2026
CVE-2026-5419 A flaw was found in gnutls 3.7 Faible 1 juin 2026
CVE-2024-52011 launch-editor allows users to open files with line numbers in editor from Node.js 7.5 Élevée 1 juin 2026
CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved… 4.1 Moyenne 1 juin 2026
CVE-2026-42013 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 8.2 Élevée 26 mai 2026
CVE-2026-42015 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 5.3 Moyenne 26 mai 2026
CVE-2026-42012 A flaw was found in gnutls 7.1 Élevée 26 mai 2026
CVE-2026-5260 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 8.2 Élevée 26 mai 2026
CVE-2026-48864 A flaw was found in libsolv 7.8 Élevée 26 mai 2026
CVE-2026-9256 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module 8.1 Élevée 22 mai 2026
CVE-2026-9277 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()` 8.1 Élevée 22 mai 2026
CVE-2026-29518 Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling… 7.3 Élevée 20 mai 2026
CVE-2026-43618 Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit… 6.1 Moyenne 20 mai 2026
CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 Élevée 18 mai 2026
CVE-2026-45736 ws is an open source WebSocket client and server for Node.js 4.4 Moyenne 15 mai 2026
CVE-2026-6477 Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),… 8.8 Élevée 14 mai 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026
CVE-2026-45186 In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via… 2.9 Faible 10 mai 2026

Autres produits Red Hat