Skip to content
OpenAdvisories

Vendor

[UNKNOWN]

239 known vulnerabilities.

Products

moodle 22 kernel: 19 jenkins 12 samba 9 ceph 7 ansible 7 389-ds-base 6 keycloak 6 dpdk 5 procps-ng, procps 5 pki-core 4 gnutls 4 QEMU: 3 golang 3 CFME 3 pdns 3 atomic-openshift 3 openstack-mistral 3 rkt 3 undertow 3 sssd 3 nginx 3 python 2 glusterfs 2 libtirpc 2 openwsman 2 infinispan 2 vdsm 2 ttembed 2 wildfly 2 redhat-certification 2 CloudForms 2 Tower 2 ovirt-engine 2 foreman 2 git-annex 2 curl 2 pulp 2 jboss 2 admin-cli 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-14667 Exploited Public exploit EPSS 74%

    Richfaces vulnerable to arbitrary code execution

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4…

    [UNKNOWN] RichFaces org.richfaces:richfaces-core Maven
    KEV Sep 28, 2023
  • Critical 9.1
    CVE-2018-10933 Public exploit EPSS 92%

    A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client cou…

    [UNKNOWN] libssh libssh libssh Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2018-14649 EPSS 12%

    It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug sh…

    [UNKNOWN] ceph-iscsi-cli
  • Critical 9.8
    CVE-2018-14643

    smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature

    An authentication bypass flaw was found in the smart_proxy_dynflow component used by Foreman. A malicious attacker can use this flaw to remotely execute arbitrary commands on machines managed by vulnerable Foreman instances, in a highly privileged context.

    [UNKNOWN] smart_proxy_dynflow smart_proxy_dynflow RubyGems
  • Critical 9.9
    CVE-2017-2637

    A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-m…

    [UNKNOWN] rhosp-director
  • Critical 9.0
    CVE-2017-7465

    It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An…

    [UNKNOWN] jboss
  • Critical 9.0
    CVE-2018-1085

    openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certifica…

    [UNKNOWN] openshift-ansible