Aller au contenu

Vulnérabilités de Red Hat Red Hat Discovery 2

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-42264 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 8 mai 2026
CVE-2026-42011 Gnutls: gnutls: security bypass due to incorrect name constraint handling 7.4 Élevée 7 mai 2026
CVE-2026-42010 Gnutls: gnutls: authentication bypass via nul character in username 7.1 Élevée 7 mai 2026
CVE-2026-6322 fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… 7.5 Élevée 5 mai 2026
CVE-2026-6321 fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()… 7.5 Élevée 4 mai 2026
CVE-2026-33846 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 7.5 Élevée 4 mai 2026
CVE-2026-33845 Gnutls: gnutls: denial of service via dtls zero-length fragment 7.5 Élevée 30 avr. 2026
CVE-2026-3832 A flaw was found in gnutls 3.7 Faible 30 avr. 2026
CVE-2026-3833 Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison 6.5 Moyenne 30 avr. 2026
CVE-2026-42039 Axios is a promise based HTTP client for the browser and Node.js 6.9 Moyenne 24 avr. 2026
CVE-2026-42041 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 24 avr. 2026
CVE-2026-42043 Axios is a promise based HTTP client for the browser and Node.js 7.2 Élevée 24 avr. 2026
CVE-2026-42044 Axios is a promise based HTTP client for the browser and Node.js 6.5 Moyenne 24 avr. 2026
CVE-2026-42033 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 24 avr. 2026
CVE-2026-40895 follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… 6.9 Moyenne 21 avr. 2026
CVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a… 7.4 Élevée 16 avr. 2026
CVE-2026-40175 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 10 avr. 2026
CVE-2026-4878 Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() 6.7 Moyenne 9 avr. 2026
CVE-2025-62718 Axios is a promise based HTTP client for the browser and Node.js 6.3 Moyenne 9 avr. 2026
CVE-2026-39892 cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Moyenne 8 avr. 2026
CVE-2026-5704 Tar: tar: hidden file injection via crafted archives 5.0 Moyenne 6 avr. 2026
CVE-2026-35385 In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'… 7.5 Élevée 2 avr. 2026
CVE-2026-4800 The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same… 8.1 Élevée 31 mars 2026
CVE-2026-5121 Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing 7.5 Élevée 30 mars 2026
CVE-2026-4519 The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for… 7.0 Élevée 20 mars 2026

Autres produits Red Hat