OpenShift kayıtları
openshift üreticisine ait 47 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %93,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-91 XML Injection (aka Blind XPath Injection)4
- CWE-125 Out-of-bounds Read3
- CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')2
- CWE-130 Improper Handling of Length Parameter Inconsistency2
- CWE-122 Heap-based Buffer Overflow2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
47 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2026-22797İstismar yok | An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.1openstack · keystonemiddleware · CWE-290 | Kritik9,9 | — | %0,7 | 19 Oca 2026 |
37İzleyin | CVE-2026-44990İstismar yok | Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`apostrophecms · sanitize-html · CWE-79 | Kritik9,3 | — | %0,7 | 12 Haz 2026 |
36İzleyin | CVE-2026-9277Kavram kanıtı | shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`CWE-77 | Kritik9,2 | — | %1,0 | 22 May 2026 |
36İzleyin | CVE-2025-10263İstismar yok | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-arm · c1-ultra · CWE-362 | Kritik9,1 | — | %0,5 | 9 Haz 2026 |
34İzleyin | CVE-2026-31812İstismar yok | Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsingquinn-rs · quinn · CWE-248 | Yüksek8,7 | — | %0,9 | 10 Mar 2026 |
34İzleyin | CVE-2026-41673İstismar yok | xmldom: Denial of service via uncontrolled recursion in XML serializationxmldom · xmldom · CWE-674 | Yüksek8,7 | — | %0,9 | 7 May 2026 |
34İzleyin | CVE-2026-5367İstismar yok | Ovn: ovn: information disclosure via crafted dhcpv6 packetsred hat · fast datapath for red hat enterprise linux 10 · CWE-130 | Yüksek8,6 | — | %0,9 | 24 Nis 2026 |
34İzleyin | CVE-2026-35469İstismar yok | SpdyStream: DOS on CRImoby · spdystream · CWE-770 | Yüksek8,7 | — | %0,8 | 16 Nis 2026 |
34İzleyin | CVE-2026-12143İstismar yok | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)form-data · form-data · CWE-93 | Yüksek8,7 | — | %0,7 | 12 Haz 2026 |
34İzleyin | CVE-2026-41674İstismar yok | xmldom: XML injection through unvalidated DocumentType serializationxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,7 | 7 May 2026 |
34İzleyin | CVE-2026-41672İstismar yok | xmldom: XML node injection through unvalidated comment serializationxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,7 | 7 May 2026 |
34İzleyin | CVE-2026-41675İstismar yok | xmldom: XML node injection through unvalidated processing instruction serializationxmldom · xmldom · CWE-91 | Yüksek8,7 | — | %0,6 | 7 May 2026 |
34İzleyin | CVE-2026-49851İstismar yok | Mistune: Potential DoS via quadratic-time parsing in parse_link_textlepture · mistune · CWE-400 | Yüksek8,7 | — | %0,6 | 24 Haz 2026 |
34İzleyin | CVE-2026-10649İstismar yok | Pacemaker: pacemaker: denial of service via integer overflow in remote message decompressionred hat · red hat enterprise linux 10 · CWE-190 | Yüksek8,6 | — | %0,6 | 16 Haz 2026 |
34İzleyin | CVE-2026-41163İstismar yok | bubblewrap vulnerable to privilege escalation in setuid mode via ptracecontainers · bubblewrap · CWE-269 | Yüksek8,7 | — | %0,4 | 9 May 2026 |
33İzleyin | CVE-2025-13878İstismar yok | Malformed BRID/HHIT records can cause named to terminate unexpectedlyisc · bind 9 · CWE-617 | Yüksek7,5 | — | %9,2 | 21 Oca 2026 |
33İzleyin | CVE-2026-4892İstismar yok | A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code withdnsmasq · dnsmasq · CWE-122 | Yüksek8,4 | — | %0,3 | 11 May 2026 |
33İzleyin | CVE-2026-54369İstismar yok | acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functionsacl project · acl · CWE-59 | Yüksek8,4 | — | %0,2 | 29 Haz 2026 |
33İzleyin | CVE-2026-54371İstismar yok | attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattrattr project · attr · CWE-59 | Yüksek8,4 | — | %0,2 | 29 Haz 2026 |
32İzleyin | CVE-2026-41316İstismar yok | ERB has an @_init deserialization guard bypass via def_module / def_method / def_classruby · erb · CWE-693 | Yüksek8,1 | — | %1,3 | 23 Nis 2026 |
31İzleyin | CVE-2026-6893İstismar yok | Dracut: dracut: root code execution via dhcp options command injectionred hat · red hat enterprise linux 10 · CWE-78 | Yüksek7,5 | — | %3,1 | 10 Haz 2026 |
31İzleyin | CVE-2026-3238İstismar yok | Samba: denial of service against ad dc wins serverred hat · red hat enterprise linux 10 · CWE-476 | Yüksek7,5 | — | %2,0 | 8 Haz 2026 |
31İzleyin | CVE-2026-11332İstismar yok | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code executionred hat · red hat ansible automation platform 2.5 for rhel 8 · CWE-88 | Yüksek7,8 | — | %0,2 | 5 Haz 2026 |
31İzleyin | CVE-2026-3842İstismar yok | Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob writered hat · red hat enterprise linux 10 · CWE-787 | Yüksek7,8 | — | %0,2 | 15 Tem 2026 |
31İzleyin | CVE-2026-12505İstismar yok | Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcallred hat · red hat enterprise linux 10 · CWE-250 | Yüksek7,8 | — | %0,2 | 18 Haz 2026 |
- CVE-2026-2279739İzleyin
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.1
KritikCVSS 9,9İstismar yokEPSS %1openstack · keystonemiddleware19 Oca 2026
- CVE-2026-4499037İzleyin
Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`
KritikCVSS 9,3İstismar yokEPSS %1apostrophecms · sanitize-html12 Haz 2026
- CVE-2026-927736İzleyin
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
KritikCVSS 9,2Kavram kanıtıEPSS %122 May 2026
- CVE-2025-1026336İzleyin
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-
KritikCVSS 9,1İstismar yokEPSS %1arm · c1-ultra9 Haz 2026
- CVE-2026-3181234İzleyin
Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing
YüksekCVSS 8,7İstismar yokEPSS %1quinn-rs · quinn10 Mar 2026
- CVE-2026-4167334İzleyin
xmldom: Denial of service via uncontrolled recursion in XML serialization
YüksekCVSS 8,7İstismar yokEPSS %1xmldom · xmldom7 May 2026
- CVE-2026-536734İzleyin
Ovn: ovn: information disclosure via crafted dhcpv6 packets
YüksekCVSS 8,6İstismar yokEPSS %1red hat · fast datapath for red hat enterprise linux 1024 Nis 2026
- CVE-2026-3546934İzleyin
SpdyStream: DOS on CRI
YüksekCVSS 8,7İstismar yokEPSS %1moby · spdystream16 Nis 2026
- CVE-2026-1214334İzleyin
form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)
YüksekCVSS 8,7İstismar yokEPSS %1form-data · form-data12 Haz 2026
- CVE-2026-4167434İzleyin
xmldom: XML injection through unvalidated DocumentType serialization
YüksekCVSS 8,7İstismar yokEPSS %1xmldom · xmldom7 May 2026
- CVE-2026-4167234İzleyin
xmldom: XML node injection through unvalidated comment serialization
YüksekCVSS 8,7İstismar yokEPSS %1xmldom · xmldom7 May 2026
- CVE-2026-4167534İzleyin
xmldom: XML node injection through unvalidated processing instruction serialization
YüksekCVSS 8,7İstismar yokEPSS %1xmldom · xmldom7 May 2026
- CVE-2026-4985134İzleyin
Mistune: Potential DoS via quadratic-time parsing in parse_link_text
YüksekCVSS 8,7İstismar yokEPSS %1lepture · mistune24 Haz 2026
- CVE-2026-1064934İzleyin
Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression
YüksekCVSS 8,6İstismar yokEPSS %1red hat · red hat enterprise linux 1016 Haz 2026
- CVE-2026-4116334İzleyin
bubblewrap vulnerable to privilege escalation in setuid mode via ptrace
YüksekCVSS 8,7İstismar yokEPSS %0containers · bubblewrap9 May 2026
- CVE-2025-1387833İzleyin
Malformed BRID/HHIT records can cause named to terminate unexpectedly
YüksekCVSS 7,5İstismar yokEPSS %9isc · bind 921 Oca 2026
- CVE-2026-489233İzleyin
A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with
YüksekCVSS 8,4İstismar yokEPSS %0dnsmasq · dnsmasq11 May 2026
- CVE-2026-5436933İzleyin
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
YüksekCVSS 8,4İstismar yokEPSS %0acl project · acl29 Haz 2026
- CVE-2026-5437133İzleyin
attr < 2.6.0 Symlink Traversal Privilege Escalation via getfattr/setfattr
YüksekCVSS 8,4İstismar yokEPSS %0attr project · attr29 Haz 2026
- CVE-2026-4131632İzleyin
ERB has an @_init deserialization guard bypass via def_module / def_method / def_class
YüksekCVSS 8,1İstismar yokEPSS %1ruby · erb23 Nis 2026
- CVE-2026-689331İzleyin
Dracut: dracut: root code execution via dhcp options command injection
YüksekCVSS 7,5İstismar yokEPSS %3red hat · red hat enterprise linux 1010 Haz 2026
- CVE-2026-323831İzleyin
Samba: denial of service against ad dc wins server
YüksekCVSS 7,5İstismar yokEPSS %2red hat · red hat enterprise linux 108 Haz 2026
- CVE-2026-1133231İzleyin
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat ansible automation platform 2.5 for rhel 85 Haz 2026
- CVE-2026-384231İzleyin
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 1015 Tem 2026
- CVE-2026-1250531İzleyin
Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall
YüksekCVSS 7,8İstismar yokEPSS %0red hat · red hat enterprise linux 1018 Haz 2026