Aller au contenu

Vulnérabilités connues pour Red Hat Discovery 2

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-44496 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 11 juin 2026
CVE-2026-44495 Axios is a promise based HTTP client for the browser and Node.js 7.0 Élevée 11 juin 2026
CVE-2026-44494 Axios is a promise based HTTP client for the browser and Node.js 8.7 Élevée 11 juin 2026
CVE-2026-44492 Axios is a promise based HTTP client for the browser and Node.js 8.6 Élevée 11 juin 2026
CVE-2026-46625 JavaScript Cookie is a JavaScript API for handling cookies, client-side 7.5 Élevée 10 juin 2026
CVE-2025-71319 image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser 8.7 Élevée 9 juin 2026
CVE-2026-45447 Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7… Non notée 9 juin 2026
CVE-2026-11332 Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution 7.8 Élevée 5 juin 2026
CVE-2026-34993 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 6.4 Moyenne 2 juin 2026
CVE-2026-5419 Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 3.7 Faible 1 juin 2026
CVE-2024-52011 launch-editor allows users to open files with line numbers in editor from Node.js 7.5 Élevée 1 juin 2026
CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved… 4.1 Moyenne 1 juin 2026
CVE-2026-42013 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 8.2 Élevée 26 mai 2026
CVE-2026-42015 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 5.3 Moyenne 26 mai 2026
CVE-2026-42012 A flaw was found in gnutls 7.1 Élevée 26 mai 2026
CVE-2026-5260 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 8.2 Élevée 26 mai 2026
CVE-2026-48864 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 7.8 Élevée 26 mai 2026
CVE-2026-9256 NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module 8.1 Élevée 22 mai 2026
CVE-2026-9277 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()` 8.1 Élevée 22 mai 2026
CVE-2026-29518 Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write 7.3 Élevée 20 mai 2026
CVE-2026-43618 Rsync < 3.4.3 Integer Overflow Information Disclosure 6.1 Moyenne 20 mai 2026
CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 7.5 Élevée 18 mai 2026
CVE-2026-45736 ws is an open source WebSocket client and server for Node.js 4.4 Moyenne 15 mai 2026
CVE-2026-6477 Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(),… 8.8 Élevée 14 mai 2026
CVE-2026-44432 urllib3 is an HTTP client library for Python 8.9 Élevée 13 mai 2026

Autres produits Red Hat