Vulnérabilités de Red Hat Red Hat Discovery 2
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-42264 | Axios is a promise based HTTP client for the browser and Node.js | 7.4 Élevée | 8 mai 2026 |
| CVE-2026-42011 | Gnutls: gnutls: security bypass due to incorrect name constraint handling | 7.4 Élevée | 7 mai 2026 |
| CVE-2026-42010 | Gnutls: gnutls: authentication bypass via nul character in username | 7.1 Élevée | 7 mai 2026 |
| CVE-2026-6322 | fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… | 7.5 Élevée | 5 mai 2026 |
| CVE-2026-6321 | fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()… | 7.5 Élevée | 4 mai 2026 |
| CVE-2026-33846 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | 7.5 Élevée | 4 mai 2026 |
| CVE-2026-33845 | Gnutls: gnutls: denial of service via dtls zero-length fragment | 7.5 Élevée | 30 avr. 2026 |
| CVE-2026-3832 | A flaw was found in gnutls | 3.7 Faible | 30 avr. 2026 |
| CVE-2026-3833 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | 6.5 Moyenne | 30 avr. 2026 |
| CVE-2026-42039 | Axios is a promise based HTTP client for the browser and Node.js | 6.9 Moyenne | 24 avr. 2026 |
| CVE-2026-42041 | Axios is a promise based HTTP client for the browser and Node.js | 4.8 Moyenne | 24 avr. 2026 |
| CVE-2026-42043 | Axios is a promise based HTTP client for the browser and Node.js | 7.2 Élevée | 24 avr. 2026 |
| CVE-2026-42044 | Axios is a promise based HTTP client for the browser and Node.js | 6.5 Moyenne | 24 avr. 2026 |
| CVE-2026-42033 | Axios is a promise based HTTP client for the browser and Node.js | 7.4 Élevée | 24 avr. 2026 |
| CVE-2026-40895 | follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… | 6.9 Moyenne | 21 avr. 2026 |
| CVE-2026-41035 | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a… | 7.4 Élevée | 16 avr. 2026 |
| CVE-2026-40175 | Axios is a promise based HTTP client for the browser and Node.js | 4.8 Moyenne | 10 avr. 2026 |
| CVE-2026-4878 | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() | 6.7 Moyenne | 9 avr. 2026 |
| CVE-2025-62718 | Axios is a promise based HTTP client for the browser and Node.js | 6.3 Moyenne | 9 avr. 2026 |
| CVE-2026-39892 | cryptography has a buffer overflow if non-contiguous buffers were passed to APIs | 6.9 Moyenne | 8 avr. 2026 |
| CVE-2026-5704 | Tar: tar: hidden file injection via crafted archives | 5.0 Moyenne | 6 avr. 2026 |
| CVE-2026-35385 | In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'… | 7.5 Élevée | 2 avr. 2026 |
| CVE-2026-4800 | The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same… | 8.1 Élevée | 31 mars 2026 |
| CVE-2026-5121 | Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing | 7.5 Élevée | 30 mars 2026 |
| CVE-2026-4519 | The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for… | 7.0 Élevée | 20 mars 2026 |
Autres produits Red Hat
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433