Vulnérabilités connues pour Red Hat Discovery 2

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-45186	In libexpat before 2.8.1, the computational complexity of attribute name collision checks allows a denial of service via…	2.9 Faible	10 mai 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	8 mai 2026
CVE-2026-42011	Gnutls: gnutls: security bypass due to incorrect name constraint handling	7.4 Élevée	7 mai 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 Élevée	7 mai 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 Élevée	5 mai 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 Élevée	4 mai 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 Élevée	4 mai 2026
CVE-2026-33845	Gnutls: gnutls: denial of service via dtls zero-length fragment	7.5 Élevée	30 avr. 2026
CVE-2026-3832	Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response	3.7 Faible	30 avr. 2026
CVE-2026-3833	Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison	6.5 Moyenne	30 avr. 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Moyenne	24 avr. 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	24 avr. 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 Élevée	24 avr. 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Moyenne	24 avr. 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	24 avr. 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Moyenne	21 avr. 2026
CVE-2026-41035	In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…	7.4 Élevée	16 avr. 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	10 avr. 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Moyenne	9 avr. 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Moyenne	9 avr. 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Moyenne	8 avr. 2026
CVE-2026-5704	Tar: tar: hidden file injection via crafted archives	5.0 Moyenne	6 avr. 2026
CVE-2026-35385	In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users'…	7.5 Élevée	2 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 Élevée	30 mars 2026

Autres produits Red Hat