Aller au contenu

Vulnérabilités de Red Hat Red Hat Hardened Images

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-44289 protobufjs compiles protobuf definitions into JavaScript (JS) functions 7.5 Élevée 13 mai 2026
CVE-2026-42945 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module 8.1 Élevée 13 mai 2026
CVE-2026-42338 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript 5.3 Moyenne 12 mai 2026
CVE-2026-42899 Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service… 7.5 Élevée 12 mai 2026
CVE-2026-35433 Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally 7.3 Élevée 12 mai 2026
CVE-2026-32177 Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally 7.3 Élevée 12 mai 2026
CVE-2026-7263 In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data incorrectly,… 6.3 Moyenne 10 mai 2026
CVE-2026-6104 In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL byte is… 6.3 Moyenne 10 mai 2026
CVE-2026-7262 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP… 2.9 Faible 10 mai 2026
CVE-2025-14179 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO… 7.4 Élevée 10 mai 2026
CVE-2026-7568 In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone()… 6.3 Moyenne 10 mai 2026
CVE-2026-42258 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 5.8 Moyenne 9 mai 2026
CVE-2026-42246 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 7.6 Élevée 9 mai 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 Élevée 7 mai 2026
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée 7 mai 2026
CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 Élevée 7 mai 2026
CVE-2026-33814 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it… 7.5 Élevée 7 mai 2026
CVE-2026-42011 Gnutls: gnutls: security bypass due to incorrect name constraint handling 7.4 Élevée 7 mai 2026
CVE-2026-42010 Gnutls: gnutls: authentication bypass via nul character in username 7.1 Élevée 7 mai 2026
CVE-2026-5081 Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure 9.1 Critique 6 mai 2026
CVE-2026-25243 Redis is an in-memory data structure store 7.7 Élevée 5 mai 2026
CVE-2026-23631 Redis is an in-memory data structure store 6.1 Moyenne 5 mai 2026
CVE-2026-23479 Redis is an in-memory data structure store 7.7 Élevée 5 mai 2026
CVE-2026-6322 fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… 7.5 Élevée 5 mai 2026
CVE-2026-42154 Prometheus is an open-source monitoring system and time series database 7.5 Élevée 4 mai 2026

Autres produits Red Hat