agentprime: red-hat-openshift-container-platform-4-17Every new CVE for red-hat-openshift-container-platform-4-17.https://agentprime.io/CVE-2026-75887: Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerhttps://agentprime.io/advisories/CVE-2026-75887/https://agentprime.io/advisories/CVE-2026-75887/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 21:24:01 GMTCVECVE-2026-75886: Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwardinghttps://agentprime.io/advisories/CVE-2026-75886/https://agentprime.io/advisories/CVE-2026-75886/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 20:48:13 GMTCVECVE-2026-75885: Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpointhttps://agentprime.io/advisories/CVE-2026-75885/https://agentprime.io/advisories/CVE-2026-75885/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 21:58:11 GMTCVEcriticalCVE-2026-50236: Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift consolehttps://agentprime.io/advisories/CVE-2026-50236/https://agentprime.io/advisories/CVE-2026-50236/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:23:59 GMTCVECVE-2026-50237: Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in openshift consolehttps://agentprime.io/advisories/CVE-2026-50237/https://agentprime.io/advisories/CVE-2026-50237/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:23:55 GMTCVECVE-2026-16313: Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --exporthttps://agentprime.io/advisories/CVE-2026-16313/https://agentprime.io/advisories/CVE-2026-16313/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 16:47:06 GMTCVECVE-2026-49332: Openshift/oauth-proxy: openshift/oauth-proxy: underscore header smuggling enables identity impersonation on wsgi/php upstreamshttps://agentprime.io/advisories/CVE-2026-49332/https://agentprime.io/advisories/CVE-2026-49332/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 12:18:26 GMTCVECVE-2026-16242: Hypershift: konnectivity proxy-server accepts agent connections without validating client certificateshttps://agentprime.io/advisories/CVE-2026-16242/https://agentprime.io/advisories/CVE-2026-16242/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 07:33:16 GMTCVEcriticalCVE-2026-15809: Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home envhttps://agentprime.io/advisories/CVE-2026-15809/https://agentprime.io/advisories/CVE-2026-15809/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 12:32:42 GMTCVECVE-2026-14476: Sssd: sssd: gpo cache path traversal via unsanitized gpcfilesyspath allows kerberos authentication bypasshttps://agentprime.io/advisories/CVE-2026-14476/https://agentprime.io/advisories/CVE-2026-14476/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:12:52 GMTCVECVE-2026-14474: Sssd: sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalationhttps://agentprime.io/advisories/CVE-2026-14474/https://agentprime.io/advisories/CVE-2026-14474/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jul 2026 09:12:33 GMTCVECVE-2026-14164: Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()https://agentprime.io/advisories/CVE-2026-14164/https://agentprime.io/advisories/CVE-2026-14164/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 06:29:23 GMTCVECVE-2026-42965: Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validationhttps://agentprime.io/advisories/CVE-2026-42965/https://agentprime.io/advisories/CVE-2026-42965/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 09:50:44 GMTCVECVE-2026-46579: Openshift/router: openshift/router: mtls client certificate spoofing via unstripped x-ssl-client headers on http frontendhttps://agentprime.io/advisories/CVE-2026-46579/https://agentprime.io/advisories/CVE-2026-46579/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 May 2026 09:50:44 GMTCVECVE-2026-4408: Samba: remote code execution in samrhttps://agentprime.io/advisories/CVE-2026-4408/https://agentprime.io/advisories/CVE-2026-4408/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 07:25:27 GMTCVEcriticalCVE-2026-1933: Samba: missing access check on reparse point operationshttps://agentprime.io/advisories/CVE-2026-1933/https://agentprime.io/advisories/CVE-2026-1933/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 12:28:44 GMTCVECVE-2026-2340: Samba: vfs_worm does not block directory modificationhttps://agentprime.io/advisories/CVE-2026-2340/https://agentprime.io/advisories/CVE-2026-2340/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 12:09:32 GMTCVECVE-2026-3012: Samba: group policy certificate enrollment uses http:// without validationhttps://agentprime.io/advisories/CVE-2026-3012/https://agentprime.io/advisories/CVE-2026-3012/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 10:02:21 GMTCVECVE-2026-42013: Gnutls: gnutls: certificate validation bypass due to oversized subject alternative namehttps://agentprime.io/advisories/CVE-2026-42013/https://agentprime.io/advisories/CVE-2026-42013/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 21:29:32 GMTCVECVE-2026-5260: Gnutls: gnutls: information disclosure via heap overread in rsa key exchangehttps://agentprime.io/advisories/CVE-2026-5260/https://agentprime.io/advisories/CVE-2026-5260/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 21:29:20 GMTCVECVE-2026-48864: Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page datahttps://agentprime.io/advisories/CVE-2026-48864/https://agentprime.io/advisories/CVE-2026-48864/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 16:16:07 GMTCVECVE-2026-42009: Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42009/https://agentprime.io/advisories/CVE-2026-42009/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 18 May 2026 12:44:45 GMTCVECVE-2026-42011: Gnutls: gnutls: security bypass due to incorrect name constraint handlinghttps://agentprime.io/advisories/CVE-2026-42011/https://agentprime.io/advisories/CVE-2026-42011/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 13:51:04 GMTCVECVE-2026-42010: Gnutls: gnutls: authentication bypass via nul character in usernamehttps://agentprime.io/advisories/CVE-2026-42010/https://agentprime.io/advisories/CVE-2026-42010/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 12:00:05 GMTCVECVE-2026-33846: Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyhttps://agentprime.io/advisories/CVE-2026-33846/https://agentprime.io/advisories/CVE-2026-33846/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 04 May 2026 09:08:51 GMTCVECVE-2026-33845: Gnutls: gnutls: denial of service via dtls zero-length fragmenthttps://agentprime.io/advisories/CVE-2026-33845/https://agentprime.io/advisories/CVE-2026-33845/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 17:41:34 GMTCVECVE-2026-3833: Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparisonhttps://agentprime.io/advisories/CVE-2026-3833/https://agentprime.io/advisories/CVE-2026-3833/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 17:37:05 GMTCVECVE-2026-4878: Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()https://agentprime.io/advisories/CVE-2026-4878/https://agentprime.io/advisories/CVE-2026-4878/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 14:49:02 GMTCVECVE-2026-4111: Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchivehttps://agentprime.io/advisories/CVE-2026-4111/https://agentprime.io/advisories/CVE-2026-4111/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 11:45:20 GMTCVECVE-2025-12801: Nfs-utils: rpc.mountd in the nfs-utils privilege escalationhttps://agentprime.io/advisories/CVE-2025-12801/https://agentprime.io/advisories/CVE-2025-12801/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 15:25:53 GMTCVECVE-2025-11234: Qemu-kvm: vnc websocket handshake use-after-freehttps://agentprime.io/advisories/CVE-2025-11234/https://agentprime.io/advisories/CVE-2025-11234/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Oct 2025 10:30:34 GMTCVECVE-2025-5987: Libssh: invalid return code for chacha20 poly1305 with openssl backendhttps://agentprime.io/advisories/CVE-2025-5987/https://agentprime.io/advisories/CVE-2025-5987/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Jul 2025 14:24:12 GMTCVECVE-2025-5318: Libssh: out-of-bounds read in sftp_handle()https://agentprime.io/advisories/CVE-2025-5318/https://agentprime.io/advisories/CVE-2025-5318/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 14:10:07 GMTCVECVE-2025-5914: Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.chttps://agentprime.io/advisories/CVE-2025-5914/https://agentprime.io/advisories/CVE-2025-5914/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Jun 2025 19:53:48 GMTCVECVE-2025-5222: Icu: stack buffer overflow in the srbroot::addtag functionhttps://agentprime.io/advisories/CVE-2025-5222/https://agentprime.io/advisories/CVE-2025-5222/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 May 2025 20:51:50 GMTCVECVE-2025-0624: Grub2: net: out-of-bounds write in grub_net_search_config_file()https://agentprime.io/advisories/CVE-2025-0624/https://agentprime.io/advisories/CVE-2025-0624/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Feb 2025 18:23:21 GMTCVECVE-2024-45497: Openshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentialshttps://agentprime.io/advisories/CVE-2024-45497/https://agentprime.io/advisories/CVE-2024-45497/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Dec 2024 02:19:22 GMTCVECVE-2024-10963: Pam: improper hostname interpretation in pam_access leads to access control bypasshttps://agentprime.io/advisories/CVE-2024-10963/https://agentprime.io/advisories/CVE-2024-10963/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 Nov 2024 16:02:34 GMTCVECVE-2024-9676: Podman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)https://agentprime.io/advisories/CVE-2024-9676/https://agentprime.io/advisories/CVE-2024-9676/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Oct 2024 15:27:33 GMTCVECVE-2024-7409: Qemu: denial of service via improper synchronization in qemu nbd server during socket closurehttps://agentprime.io/advisories/CVE-2024-7409/https://agentprime.io/advisories/CVE-2024-7409/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Aug 2024 13:19:27 GMTCVECVE-2024-7128: Openshift-console: unauthenticated data exposurehttps://agentprime.io/advisories/CVE-2024-7128/https://agentprime.io/advisories/CVE-2024-7128/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Jul 2024 13:34:19 GMTCVE