Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 123

Export CSV
CVE-2022-41854

Stack Overflow in Snakeyaml

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.

CVSS 3.1 · 5.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Fedoraproject Redhat Snakeyaml Project
Products
Fedora Amq Clients Camel Spring Boot and 10 more
CVE-2022-3916

Keycloak: session takeover with oidc offline refreshtokens

A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to resolve a user session attached to a previously authenticated user; when utilizing the refresh token, they will be issued a token for the original user.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Keycloak Openshift Container Platform and 6 more
CVE-2022-38749

DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Redhat Snakeyaml Project
Products
Debian Linux Amq Broker Amq Clients and 8 more
CVE-2022-27664

golang: net/http: handle server errors after sending GOAWAY

In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, attackers can cause a denial of service because an HTTP/2 connection can hang during closing if shutdown were preempted by a fatal error.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Fedoraproject Golang Redhat
Products
Fedora Go Acm and 16 more
CVE-2022-1438

Keycloak: xss on impersonation under specific circumstances

A flaw was found in Keycloak. Under specific circumstances, HTML entities are not sanitized during user impersonation, resulting in a Cross-site scripting (XSS) vulnerability.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Keycloak Red Hat Single Sign On Rhosemc
CVE-2022-1274

keycloak: HTML injection in execute-actions-email Admin REST API

A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Linux For Ibm Z Systems Enterprise Linux For Ibm Z Systems Eus and 7 more
CVE-2022-1245

keycloak: Privilege escalation vulnerability on Token Exchange

A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Keycloak Red Hat Single Sign On Rhosemc
CVE-2021-4133

Keycloak: Incorrect authorization allows unpriviledged users to create other users

A flaw was found in Keycloak in versions from 12.0.0 and before 15.1.1 which allows an attacker with any existing user account to create new default user accounts via the administrative REST API even when new user registration is disabled.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Keycloak Red Hat Single Sign On Rhosemc
CVE-2021-43565

golang.org/x/crypto: empty plaintext packet causes panic

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Golang Redhat
Products
Ssh Acm Advanced Cluster Security and 6 more
CVE-2021-3827

keycloak-server-spi-private: ECP SAML binding bypasses authentication flows

A flaw was found in keycloak, where the default ECP binding flow allows other authentication flows to be bypassed. By exploiting this behavior, an attacker can bypass the MFA authentication by sending a SOAP request with an AuthnRequest and Authorization header with the user's credentials. The highest threat from this vulnerability is to confidentiality and integrity.

CVSS 3.1 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Keycloak Openshift Container Platform and 3 more
CVE-2021-32690

Repository credentials passed to alternate domain

Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources). In versions of helm prior to 3.6.1, a vulnerability exists where the username and password credentials associated with a Helm repository could be passed on to another domain referenced by that Helm repository. This issue has been resolved in 3.6.1. There is a workaround through which one may check for improperly passed credentials. One may use a username and password for a Helm repository and may audit the Helm repository in order to check for another domain being used that could have received the credentials. In the `index.yaml` file for that repository, one may look for another domain in the `urls` list for the chart versions. If there is another domain found and that chart version was pulled or installed, the credentials would be passed on.

CVSS 3.1 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Helm Redhat
Products
Helm Acm Advanced Cluster Security and 2 more
CVE-2021-20289

resteasy: Error message exposes endpoint class information

A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Netapp Oracle Quarkus and 1 more
Products
Oncommand Insight Communications Cloud Native Core Console Quarkus and 9 more
CVE-2021-0341

okhttp: information disclosure via improperly used cryptographic function

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Android Amq Streams Jboss Data Grid and 4 more
CVE-2020-10695

containers/redhat-sso-7: /etc/passwd is given incorrect privileges

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Red Hat Single Sign On Rhosemc Single Sign-on