Vulnérabilités de Red Hat Red Hat Satellite 6

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Moyenne	2 juin 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Moyenne	1 juin 2026
CVE-2026-45292	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…	5.3 Moyenne	28 mai 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 Élevée	28 mai 2026
CVE-2026-44604	Rpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command	7.0 Élevée	28 mai 2026
CVE-2026-48710	Exploitée Kludex Starlette HTTP Request/Response Smuggling Vulnerability	6.5 Moyenne	26 mai 2026
CVE-2026-48864	A flaw was found in libsolv	7.8 Élevée	26 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-9149	Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file	6.5 Moyenne	20 mai 2026
CVE-2026-9150	Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums	6.5 Moyenne	20 mai 2026
CVE-2026-31072	The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to…	9.8 Critique	19 mai 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Moyenne	15 mai 2026
CVE-2026-42561	Python-Multipart is a streaming multipart parser for Python	7.5 Élevée	13 mai 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 Élevée	13 mai 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Faible	13 mai 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Moyenne	13 mai 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 Élevée	13 mai 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Moyenne	12 mai 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	8 mai 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 Élevée	7 mai 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 Élevée	7 mai 2026

Autres produits Red Hat