Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-26017 CoreDNS is a DNS server that chains plugins 7.7 Élevée 6 mars 2026
CVE-2026-26018 CoreDNS is a DNS server that chains plugins 7.5 Élevée 6 mars 2026
CVE-2026-29074 SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files 7.5 Élevée 6 mars 2026
CVE-2025-69534 Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser… 7.5 Élevée 5 mars 2026
CVE-2025-15558 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not… 7.0 Élevée 4 mars 2026
CVE-2025-12801 Nfs-utils: rpc.mountd in the nfs-utils privilege escalation 6.5 Moyenne 4 mars 2026
CVE-2026-3338 Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature… 7.5 Élevée 2 mars 2026
CVE-2026-3336 Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain… 7.5 Élevée 2 mars 2026
CVE-2026-2293 A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when… 8.2 Élevée 27 févr. 2026
CVE-2026-27606 Rollup is a module bundler for JavaScript 8.8 Élevée 25 févr. 2026
CVE-2026-2243 A flaw was found in QEMU 5.1 Moyenne 19 févr. 2026
CVE-2026-24834 Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)… 9.4 Critique 19 févr. 2026
CVE-2026-0665 An off-by-one error was found in QEMU's KVM Xen guest support 6.5 Moyenne 18 févr. 2026
CVE-2025-8860 A flaw was found in QEMU in the uefi-vars virtual device 3.3 Faible 18 févr. 2026
CVE-2025-14876 A flaw was found in the virtio-crypto device of QEMU 5.5 Moyenne 18 févr. 2026
CVE-2025-1272 The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode… 7.7 Élevée 18 févr. 2026
CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the… 2.9 Faible 11 févr. 2026
CVE-2026-25639 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 9 févr. 2026
CVE-2025-14831 Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification 5.3 Moyenne 9 févr. 2026
CVE-2026-1757 Libxml2: memory leak leading to local denial of service in xmllint interactive shell 6.2 Moyenne 2 févr. 2026
CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query 7.5 Élevée 28 janv. 2026
CVE-2026-24842 node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink… 8.2 Élevée 28 janv. 2026
CVE-2025-15467 Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can… Non notée 27 janv. 2026
CVE-2025-9820 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11… 4.0 Moyenne 26 janv. 2026
CVE-2025-9615 A flaw was found in NetworkManager 3.3 Faible 26 janv. 2026

Autres produits Red Hat