agentprime: red-hat-openstack-platform-18-0Every new CVE for red-hat-openstack-platform-18-0.https://agentprime.io/CVE-2026-93009: Dnsmasq: dnsmasq: heap out-of-bounds read in dhcpv6 option 39 fqdn decoderhttps://agentprime.io/advisories/CVE-2026-93009/https://agentprime.io/advisories/CVE-2026-93009/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 13:13:34 GMTCVECVE-2026-93010: Dnsmasq: dnsmasq: --leasequery without address argument applies no source address checkhttps://agentprime.io/advisories/CVE-2026-93010/https://agentprime.io/advisories/CVE-2026-93010/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 13:13:23 GMTCVECVE-2026-93006: Dnsmasq: dnsmasq: tftp prefetch cache keyed on stale heap pointer serves wrong file contenthttps://agentprime.io/advisories/CVE-2026-93006/https://agentprime.io/advisories/CVE-2026-93006/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:47:23 GMTCVECVE-2026-93007: Dnsmasq: dnsmasq: tcp/53 child-slot exhaustion starves dnssec validationhttps://agentprime.io/advisories/CVE-2026-93007/https://agentprime.io/advisories/CVE-2026-93007/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:47:18 GMTCVECVE-2026-93011: Dnsmasq: dnsmasq: heap out-of-bounds write in dnssec validator via to_wire/from_wire transformshttps://agentprime.io/advisories/CVE-2026-93011/https://agentprime.io/advisories/CVE-2026-93011/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:47:10 GMTCVECVE-2026-93008: Dnsmasq: dnsmasq: out-of-bailiwick cache injection through cname chase in split-dns configurationshttps://agentprime.io/advisories/CVE-2026-93008/https://agentprime.io/advisories/CVE-2026-93008/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 12:33:22 GMTCVECVE-2026-114236: Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layershttps://agentprime.io/advisories/CVE-2026-114236/https://agentprime.io/advisories/CVE-2026-114236/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 08:04:32 GMTCVECVE-2026-92982: Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injectionhttps://agentprime.io/advisories/CVE-2026-92982/https://agentprime.io/advisories/CVE-2026-92982/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 15:36:57 GMTCVECVE-2026-83535: Openstack-network-exporter: basic-auth uses plaintext password storage and non-constant-time comparisonhttps://agentprime.io/advisories/CVE-2026-83535/https://agentprime.io/advisories/CVE-2026-83535/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 18:50:25 GMTCVECVE-2026-83536: Openstack-network-exporter: http.server has no readheadertimeout / readtimeout (slowloris)https://agentprime.io/advisories/CVE-2026-83536/https://agentprime.io/advisories/CVE-2026-83536/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 18:50:23 GMTCVECVE-2026-107935: Gvisor-tap-vsock: gvisor-tap-vsock: unathenticated arbitrary file deletion on the host via /exposehttps://agentprime.io/advisories/CVE-2026-107935/https://agentprime.io/advisories/CVE-2026-107935/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 09:05:43 GMTCVEcriticalCVE-2026-89091: Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionhttps://agentprime.io/advisories/CVE-2026-89091/https://agentprime.io/advisories/CVE-2026-89091/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 21:49:30 GMTCVECVE-2026-87872: Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosurehttps://agentprime.io/advisories/CVE-2026-87872/https://agentprime.io/advisories/CVE-2026-87872/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 16:06:27 GMTCVECVE-2026-87874: Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controllerhttps://agentprime.io/advisories/CVE-2026-87874/https://agentprime.io/advisories/CVE-2026-87874/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 16:06:22 GMTCVECVE-2026-80158: Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listingshttps://agentprime.io/advisories/CVE-2026-80158/https://agentprime.io/advisories/CVE-2026-80158/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Aug 2026 22:06:07 GMTCVECVE-2026-11837: Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chownhttps://agentprime.io/advisories/CVE-2026-11837/https://agentprime.io/advisories/CVE-2026-11837/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 10 Jun 2026 05:03:05 GMTCVECVE-2026-34956: Openvswitch: open vswitch: denial of service via malformed ftp epasv commandhttps://agentprime.io/advisories/CVE-2026-34956/https://agentprime.io/advisories/CVE-2026-34956/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 May 2026 15:45:04 GMTCVECVE-2024-43168: Unbound: heap-buffer-overflow in unboundhttps://agentprime.io/advisories/CVE-2024-43168/https://agentprime.io/advisories/CVE-2024-43168/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Aug 2024 20:25:24 GMTCVECVE-2024-43167: Unbound: null pointer dereference in unboundhttps://agentprime.io/advisories/CVE-2024-43167/https://agentprime.io/advisories/CVE-2024-43167/CVSS 2.8 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Aug 2024 20:24:49 GMTCVECVE-2024-4438: Etcd: incomplete fix for cve-2023-39325/cve-2023-44487 in openstack platformhttps://agentprime.io/advisories/CVE-2024-4438/https://agentprime.io/advisories/CVE-2024-4438/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 May 2024 08:59:42 GMTCVECVE-2024-4437: Etcd: incomplete fix for cve-2021-44716 in openstack platformhttps://agentprime.io/advisories/CVE-2024-4437/https://agentprime.io/advisories/CVE-2024-4437/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 May 2024 08:57:40 GMTCVECVE-2024-4436: Etcd: incomplete fix for cve-2022-41723 in openstack platformhttps://agentprime.io/advisories/CVE-2024-4436/https://agentprime.io/advisories/CVE-2024-4436/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 May 2024 08:57:12 GMTCVECVE-2023-6725: Tripleo-ansible: bind keys are world readablehttps://agentprime.io/advisories/CVE-2023-6725/https://agentprime.io/advisories/CVE-2023-6725/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 Mar 2024 12:38:23 GMTCVE