Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,139

Export CSV
CVE-2013-0262

rubygem-rack: Path sanitization information disclosure

rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Rack Project Redhat
Products
Rack Openshift
CVE-2012-3463

rubygem-actionpack: potential XSS vulnerability in select_tag prompt

Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the select_tag helper.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2013-0256

rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template

darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.

CVSS 2.0 · 4.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Cloudforms Cloudengine Redhat and 2 more
Products
Ubuntu Linux 1 Openshift and 3 more
CVE-2012-5647

openshift-origin-node-util: restorer.php arbitrary URL redirection

Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the PATH_INFO.

CVSS 2.0 · 5.8 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Origin
CVE-2013-0253

maven-wagon: all SSL certificate checking is disabled by default

The default configuration of Apache Maven 3.0.4, when using Maven Wagon 2.1, disables SSL certificate checks, which allows remote attackers to spoof servers via a man-in-the-middle (MITM) attack.

CVSS 2.0 · 5.8 Medium EPSS 1.6% KEV · Not listed
Vendors
Apache Redhat
Products
Maven Maven Wagon Openshift
CVE-2013-5573

jenkins: default markup formatter permits offsite-bound forms (SECURITY-88)

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2012-3424

rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest

The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.

CVSS 2.0 · 5.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Cloudforms Cloudengine Redhat Rhel Sam and 1 more
Products
1 Openshift 1.1 and 2 more
CVE-2012-5646

openshift-origin-node-util: restorer.php preg_match shell code injection

node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a crafted uuid in the PATH_INFO.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Redhat
Products
Openshift Openshift Origin
CVE-2013-0169

SSL/TLS: CBC padding timing attack (lucky-13)

The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.

CVSS 2.0 · 2.6 Low EPSS 35.6% KEV · Not listed
Vendors
Openssl Oracle Polarssl and 1 more
Products
Openssl Openjdk Polarssl and 8 more
CVE-2013-4330

Camel: remote code execution via header field manipulation

Apache Camel before 2.9.7, 2.10.0 before 2.10.7, 2.11.0 before 2.11.2, and 2.12.0 allows remote attackers to execute arbitrary simple language expressions by including "$simple{}" in a CamelFileName message header to a (1) FILE or (2) FTP producer.

CVSS 2.0 · 6.8 Medium EPSS 8.5% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Fuse Esb Enterprise Fuse Management Console and 7 more
CVE-2012-5622

openshift-console: CSRF attack

Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in OpenShift 0.0.5 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2013-4287

rubygems: version regex algorithmic complexity vulnerability

Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through 1.8.25, 2.0.x before 2.0.8, and 2.1.x before 2.1.0, as used in Ruby 1.9.0 through 2.0.0p247, allows remote attackers to cause a denial of service (CPU consumption) via a crafted gem version that triggers a large amount of backtracking in a regular expression.

CVSS 2.0 · 4.3 Medium EPSS 3.3% KEV · Not listed
Vendors
Redhat Ruby-lang Rubygems
Products
Enterprise Linux Enterprise Mrg Openshift and 4 more
CVE-2023-46234

browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack

browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. An upper bound check issue in `dsaVerify` function allows an attacker to construct signatures that can be successfully verified by any public key, thus leading to a signature forgery attack. All places in this project that involve DSA verification of user-input signatures will be affected by this vulnerability. This issue has been patched in version 4.2.2.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Browserify Debian Redhat
Products
Browserify-sign Debian Linux Openshift Distributed Tracing
CVE-2022-43844

IBM Robotic Process Automation for Cloud Pak session fixation

IBM Robotic Process Automation for Cloud Pak 20.12 through 21.0.3 is vulnerable to broken access control. A user is not correctly redirected to the platform log out screen when logging out of IBM RPA for Cloud Pak. IBM X-Force ID: 239081.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ibm Redhat
Products
Robotic Process Automation For Cloud Pak Openshift
CVE-2023-0296

openshift: etcd grpc-proxy vulnerable to The Birthday attack against 64-bit block cipher

The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Openshift
CVE-2022-41721

Request smuggling due to improper request handling in golang.org/x/net/http2/h2c

A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP request, which could be attacker-manipulated to represent arbitrary HTTP2 requests.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Golang Redhat
Products
H2c Acm Migration Toolkit Applications and 2 more
CVE-2023-22863

IBM Robotic Process Automation information disclosure

IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 244109.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Microsoft Redhat
Products
Robotic Process Automation Robotic Process Automation As A Service Robotic Process Automation For Cloud Pak and 2 more