agentprime: red-hat-openshift-container-platform-4-13

agentprime: red-hat-openshift-container-platform-4-13Every new CVE for red-hat-openshift-container-platform-4-13.https://agentprime.io/CVE-2026-75887: Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerhttps://agentprime.io/advisories/CVE-2026-75887/https://agentprime.io/advisories/CVE-2026-75887/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 21:24:01 GMTCVECVE-2026-75885: Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointhttps://agentprime.io/advisories/CVE-2026-75885/https://agentprime.io/advisories/CVE-2026-75885/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 21:58:11 GMTCVEcriticalCVE-2026-50237: Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift consolehttps://agentprime.io/advisories/CVE-2026-50237/https://agentprime.io/advisories/CVE-2026-50237/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:23:55 GMTCVECVE-2026-15816: Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()https://agentprime.io/advisories/CVE-2026-15816/https://agentprime.io/advisories/CVE-2026-15816/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Aug 2026 10:33:33 GMTCVECVE-2026-49332: Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreamshttps://agentprime.io/advisories/CVE-2026-49332/https://agentprime.io/advisories/CVE-2026-49332/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:18:26 GMTCVECVE-2026-15809: Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home envhttps://agentprime.io/advisories/CVE-2026-15809/https://agentprime.io/advisories/CVE-2026-15809/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 12:32:42 GMTCVECVE-2026-14476: Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypasshttps://agentprime.io/advisories/CVE-2026-14476/https://agentprime.io/advisories/CVE-2026-14476/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:12:52 GMTCVECVE-2026-14474: Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationhttps://agentprime.io/advisories/CVE-2026-14474/https://agentprime.io/advisories/CVE-2026-14474/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:12:33 GMTCVECVE-2026-58015: Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receivehttps://agentprime.io/advisories/CVE-2026-58015/https://agentprime.io/advisories/CVE-2026-58015/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 13:02:45 GMTCVECVE-2026-58014: Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"https://agentprime.io/advisories/CVE-2026-58014/https://agentprime.io/advisories/CVE-2026-58014/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 12:57:35 GMTCVECVE-2026-14164: Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()https://agentprime.io/advisories/CVE-2026-14164/https://agentprime.io/advisories/CVE-2026-14164/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 06:29:23 GMTCVECVE-2026-6893: Dracut: dracut: root code execution via dhcp options command injectionhttps://agentprime.io/advisories/CVE-2026-6893/https://agentprime.io/advisories/CVE-2026-6893/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 19:49:27 GMTCVECVE-2026-1784: Ose-cluster-ingress-operator: remote code execution through haproxy configuration injectionhttps://agentprime.io/advisories/CVE-2026-1784/https://agentprime.io/advisories/CVE-2026-1784/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 07:22:26 GMTCVECVE-2026-46579: Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontendhttps://agentprime.io/advisories/CVE-2026-46579/https://agentprime.io/advisories/CVE-2026-46579/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 09:50:44 GMTCVECVE-2026-4408: Samba: remote code execution in samrhttps://agentprime.io/advisories/CVE-2026-4408/https://agentprime.io/advisories/CVE-2026-4408/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 07:25:27 GMTCVEcriticalCVE-2026-1933: Samba: missing access check on reparse point operationshttps://agentprime.io/advisories/CVE-2026-1933/https://agentprime.io/advisories/CVE-2026-1933/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 12:28:44 GMTCVECVE-2026-2340: Samba: vfs_worm does not block directory modificationhttps://agentprime.io/advisories/CVE-2026-2340/https://agentprime.io/advisories/CVE-2026-2340/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 12:09:32 GMTCVECVE-2026-3012: Samba: group policy certificate enrollment uses http:// without validationhttps://agentprime.io/advisories/CVE-2026-3012/https://agentprime.io/advisories/CVE-2026-3012/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 10:02:21 GMTCVECVE-2026-5260: Gnutls: gnutls: information disclosure via heap overread in rsa key exchangehttps://agentprime.io/advisories/CVE-2026-5260/https://agentprime.io/advisories/CVE-2026-5260/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 21:29:20 GMTCVECVE-2026-48864: Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page datahttps://agentprime.io/advisories/CVE-2026-48864/https://agentprime.io/advisories/CVE-2026-48864/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:16:07 GMTCVECVE-2026-42009: Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42009/https://agentprime.io/advisories/CVE-2026-42009/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2026 12:44:45 GMTCVECVE-2026-42010: Gnutls: gnutls: authentication bypass via nul character in usernamehttps://agentprime.io/advisories/CVE-2026-42010/https://agentprime.io/advisories/CVE-2026-42010/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 12:00:05 GMTCVECVE-2026-33846: Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyhttps://agentprime.io/advisories/CVE-2026-33846/https://agentprime.io/advisories/CVE-2026-33846/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 09:08:51 GMTCVECVE-2026-33845: Gnutls: gnutls: denial of service via dtls zero-length fragmenthttps://agentprime.io/advisories/CVE-2026-33845/https://agentprime.io/advisories/CVE-2026-33845/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 17:41:34 GMTCVECVE-2026-3833: Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonhttps://agentprime.io/advisories/CVE-2026-3833/https://agentprime.io/advisories/CVE-2026-3833/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 17:37:05 GMTCVECVE-2026-4878: Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()https://agentprime.io/advisories/CVE-2026-4878/https://agentprime.io/advisories/CVE-2026-4878/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 14:49:02 GMTCVECVE-2026-5121: Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processinghttps://agentprime.io/advisories/CVE-2026-5121/https://agentprime.io/advisories/CVE-2026-5121/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Mar 2026 07:47:28 GMTCVECVE-2026-4424: Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processinghttps://agentprime.io/advisories/CVE-2026-4424/https://agentprime.io/advisories/CVE-2026-4424/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 19 Mar 2026 13:50:27 GMTCVECVE-2026-4111: Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivehttps://agentprime.io/advisories/CVE-2026-4111/https://agentprime.io/advisories/CVE-2026-4111/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 11:45:20 GMTCVECVE-2025-13601: Glib: integer overflow in in g_escape_uri_string()https://agentprime.io/advisories/CVE-2025-13601/https://agentprime.io/advisories/CVE-2025-13601/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 14:44:22 GMTCVECVE-2025-61662: Grub2: missing unregister call for gettext command may lead to use-after-freehttps://agentprime.io/advisories/CVE-2025-61662/https://agentprime.io/advisories/CVE-2025-61662/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Nov 2025 18:20:48 GMTCVECVE-2025-11561: Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemshttps://agentprime.io/advisories/CVE-2025-11561/https://agentprime.io/advisories/CVE-2025-11561/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Oct 2025 13:37:53 GMTCVECVE-2025-7425: Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrhttps://agentprime.io/advisories/CVE-2025-7425/https://agentprime.io/advisories/CVE-2025-7425/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 13:53:37 GMTCVECVE-2025-5987: Libssh: invalid return code for chacha20 poly1305 with openssl backendhttps://agentprime.io/advisories/CVE-2025-5987/https://agentprime.io/advisories/CVE-2025-5987/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 14:24:12 GMTCVECVE-2025-5318: Libssh: out-of-bounds read in sftp_handle()https://agentprime.io/advisories/CVE-2025-5318/https://agentprime.io/advisories/CVE-2025-5318/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 14:10:07 GMTCVECVE-2025-49794: Libxml: heap use after free (uaf) leads to denial of service (dos)https://agentprime.io/advisories/CVE-2025-49794/https://agentprime.io/advisories/CVE-2025-49794/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 15:24:31 GMTCVEcriticalCVE-2025-49796: Libxml: type confusion leads to denial of service (dos)https://agentprime.io/advisories/CVE-2025-49796/https://agentprime.io/advisories/CVE-2025-49796/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 16 Jun 2025 15:14:28 GMTCVEcriticalCVE-2025-6021: Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2https://agentprime.io/advisories/CVE-2025-6021/https://agentprime.io/advisories/CVE-2025-6021/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Jun 2025 12:49:16 GMTCVECVE-2025-5222: Icu: stack buffer overflow in the srbroot::addtag functionhttps://agentprime.io/advisories/CVE-2025-5222/https://agentprime.io/advisories/CVE-2025-5222/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 May 2025 20:51:50 GMTCVECVE-2025-0624: Grub2: net: out-of-bounds write in grub_net_search_config_file()https://agentprime.io/advisories/CVE-2025-0624/https://agentprime.io/advisories/CVE-2025-0624/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 18:23:21 GMTCVECVE-2024-12085: Rsync: info leak via uninitialized stack contentshttps://agentprime.io/advisories/CVE-2024-12085/https://agentprime.io/advisories/CVE-2024-12085/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Jan 2025 17:37:16 GMTCVECVE-2024-45497: Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentialshttps://agentprime.io/advisories/CVE-2024-45497/https://agentprime.io/advisories/CVE-2024-45497/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Dec 2024 02:19:22 GMTCVECVE-2024-9676: Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)https://agentprime.io/advisories/CVE-2024-9676/https://agentprime.io/advisories/CVE-2024-9676/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Oct 2024 15:27:33 GMTCVECVE-2024-7409: Qemu: denial of service via improper synchronization in qemu nbd server during socket closurehttps://agentprime.io/advisories/CVE-2024-7409/https://agentprime.io/advisories/CVE-2024-7409/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 13:19:27 GMTCVECVE-2024-6409: Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9https://agentprime.io/advisories/CVE-2024-6409/https://agentprime.io/advisories/CVE-2024-6409/CVSS 7.0 (High). Critical: CVSS score 7.0 (7.0 or more) and EPSS 0.28 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Jul 2024 17:57:10 GMTCVEcriticalCVE-2024-6387: Openssh: regresshion - race condition in ssh allows rce/doshttps://agentprime.io/advisories/CVE-2024-6387/https://agentprime.io/advisories/CVE-2024-6387/CVSS 8.1 (High). Critical: CVSS score 8.1 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jul 2024 12:37:25 GMTCVEcriticalCVE-2023-5408: Openshift: modification of node role labelshttps://agentprime.io/advisories/CVE-2023-5408/https://agentprime.io/advisories/CVE-2023-5408/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Nov 2023 02:55:58 GMTCVE