Redhat

Satellite

223 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2018-1090

  • EPSS 0.29%
  • Veröffentlicht 18.06.2018 14:29:00
  • Zuletzt bearbeitet 21.11.2024 03:59:09

In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the distributor/importer. An attacker with API access can then view these secrets.

7.5

CVE-2016-1000338

  • EPSS 0.38%
  • Veröffentlicht 01.06.2018 20:29:00
  • Zuletzt bearbeitet 05.05.2025 14:14:28

In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject extra elements in the sequence making up the signature and still have it validate, which in s...

6.5

CVE-2018-11212

Exploit
  • EPSS 1.9%
  • Veröffentlicht 16.05.2018 17:29:00
  • Zuletzt bearbeitet 21.11.2024 03:42:54

An issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted file.

5.9

CVE-2018-10237

  • EPSS 3.26%
  • Veröffentlicht 26.04.2018 21:29:00
  • Zuletzt bearbeitet 21.11.2024 03:41:04

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray...

7.4

CVE-2018-2783

  • EPSS 0.45%
  • Veröffentlicht 19.04.2018 02:29:03
  • Zuletzt bearbeitet 21.11.2024 04:04:26

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit v...

3.1

CVE-2018-2790

  • EPSS 0.14%
  • Veröffentlicht 19.04.2018 02:29:03
  • Zuletzt bearbeitet 06.05.2025 15:15:55

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unau...

7.7

CVE-2018-2794

  • EPSS 0.05%
  • Veröffentlicht 19.04.2018 02:29:03
  • Zuletzt bearbeitet 21.11.2024 04:04:28

Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated att...

5.3

CVE-2018-2795

  • EPSS 0.15%
  • Veröffentlicht 19.04.2018 02:29:03
  • Zuletzt bearbeitet 21.11.2024 04:04:28

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable...

5.3

CVE-2018-2796

  • EPSS 0.26%
  • Veröffentlicht 19.04.2018 02:29:03
  • Zuletzt bearbeitet 06.05.2025 15:15:55

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vul...

5.3

CVE-2018-2797

  • EPSS 0.15%
  • Veröffentlicht 19.04.2018 02:29:03
  • Zuletzt bearbeitet 21.11.2024 04:04:28

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vuln...