IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API

Vulnerabilidades de rhosemc (CVE)

Registros CVE publicados para rhosemc, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1.0 27
27 resultados
7.4Alta
CVE-2026-15563

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25; Red Hat Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7; Red Hat Red Hat JBoss Enterprise Application Platform 8.1.8.GA; Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10

A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing an attacker to hijack JNDI lookups and binding them to a malicious ORB, achieving MITM or DoS on further invocations.

7.5Alta
CVE-2026-7507

Org.keycloak/keycloak-services: session fixation in oidc login flow that can lead to account takeover

Red Hat Red Hat build of Keycloak 26.2; Red Hat Red Hat build of Keycloak 26.2.16; Red Hat Red Hat build of Keycloak 26.4; Red Hat Red Hat build of Keycloak 26.4.12

A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated attacker could exploit this flaw by pre-creating an authentication session and tricking a victim into visiting a maliciously crafted link. By leveraging the /…

7.5Alta
CVE-2026-7307

Keycloak: keycloak: denial of service via specially crafted saml input

keycloak; Red Hat Red Hat build of Keycloak 26.2; Red Hat Red Hat build of Keycloak 26.2.16; Red Hat Red Hat build of Keycloak 26.4

A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML input to the Security Assertion Markup Language (SAML) endpoint. This malicious input can cause high CPU usage and worker thread starvation, leading to a Denial …

7.0Alta
CVE-2026-4786

Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()

Python Software Foundation CPython; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details.

9.1Crítica
CVE-2026-6100

Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure

Python Software Foundation CPython; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under …

7.5Alta
CVE-2026-4634

Keycloak: keycloak: denial of service via excessive processing of openid connect scope parameters

Red Hat Red Hat build of Keycloak 26.2; Red Hat Red Hat build of Keycloak 26.2.15; Red Hat Red Hat build of Keycloak 26.4; Red Hat Red Hat build of Keycloak 26.4.11

A flaw was found in Keycloak. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with an excessively long scope parameter to the OpenID Connect (OIDC) token endpoint. This leads to high resource consumption …

7.5Alta
CVE-2026-5121

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overfl…

1.1%EPSS
7.0Alta
CVE-2026-4519

webbrowser.open() allows leading dashes in URLs

Python Software Foundation CPython; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

7.5Alta
CVE-2026-4424

Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this …

1.3%EPSS
7.5Alta
CVE-2026-27135

nghttp2 Denial of service: Assertion failure due to the missing state validation

nghttp2 nghttp2; Red Hat JBoss Core Services for RHEL 8; Red Hat JBoss Core Services on RHEL 7; Red Hat Red Hat Enterprise Linux 10

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2…

5.3Media
CVE-2026-2575

Keycloak: keycloak: denial of service due to excessive samlrequest decompression

Red Hat Red Hat build of Keycloak 26.4; Red Hat Red Hat build of Keycloak 26.4.10; Red Hat Red Hat Single Sign-On 7.6.13; Red Hat Red Hat Single Sign-On 7.6 for RHEL 7

A flaw was found in Keycloak. An unauthenticated remote attacker can trigger an application level Denial of Service (DoS) by sending a highly compressed SAMLRequest through the SAML Redirect Binding. The server fails to enforce size limits during DEFLATE deco…

7.7Alta
CVE-2026-2092

Keycloak-services: keycloak: unauthorized access via improper validation of encrypted saml assertions

Red Hat Red Hat build of Keycloak 26.2; Red Hat Red Hat build of Keycloak 26.2.14; Red Hat Red Hat build of Keycloak 26.4; Red Hat Red Hat build of Keycloak 26.4.10

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language (SAML) broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by…

2.7Baja
CVE-2026-3497
Ubuntu openssh; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on …

2.4%EPSS
5.3Media
CVE-2025-14831

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

gnutls; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternativ…

4.0Media
CVE-2025-9820

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

gnutls; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. Thi…

8.3Alta
CVE-2026-0603

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

org.hibernate/hibernate-core; Red Hat Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7; Red Hat Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7; Red Hat Red Hat JBoss Enterprise Application Platform 7.4.24

A flaw was found in Hibernate. A remote attacker with low privileges could exploit a second-order SQL injection vulnerability by providing specially crafted, unsanitized non-alphanumeric characters in the ID column when the InlineIdsOrClauseBuilder is used. T…

1.0%EPSS
9.6Crítica
CVE-2025-12543

Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

Red Hat Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11; Red Hat Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7; Red Hat Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7; Red Hat Red Hat JBoss Enterprise Application Platform 7.4.24

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malici…

1.3%EPSS
6.4Media
CVE-2025-58712

Amq: privilege escalation via excessive /etc/passwd permissions

apache activemq-artemis; Red Hat RHEL-9 based Middleware Containers; Red Hat Red Hat AMQ Broker 7

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an aff…

7.5Alta
CVE-2025-9784

Undertow: undertow madeyoureset http/2 ddos vulnerability

undertow; Red Hat Red Hat build of Apache Camel 4.14.2 for Spring Boot 3.5.8; Red Hat Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7; Red Hat Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeate…

2.3%EPSS
7.8Alta
CVE-2025-6020

Linux-pam: linux-pam directory traversal

linux-pam; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.

6.1Media
CVE-2024-8883

Keycloak: vulnerable redirect uri validation results in open redirec

keycloak-services; Red Hat Red Hat Build of Keycloak; Red Hat Red Hat build of Keycloak 22; Red Hat Red Hat build of Keycloak 24

A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http://localhost or http://127.0.0.1, enabling sensitive information such as authorization codes to be ex…

2.1%EPSS
7.4Alta
CVE-2024-1249

Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos

keycloak; Red Hat Red Hat AMQ Broker 7; Red Hat Red Hat build of Keycloak 22; Red Hat Red Hat build of Keycloak 22.0.10

A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the applicati…

8.1Alta
CVE-2024-1132

Keycloak: path transversal in redirection validation

keycloak; Red Hat Migration Toolkit for Runtimes 1 on RHEL 8; Red Hat MTA-6.2-RHEL-9; Red Hat Red Hat AMQ Broker 7

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduc…

1.6%EPSS
7.5Alta
CVE-2024-1635

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

undertow; Red Hat Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2; Red Hat Red Hat Fuse 7.13.0; Red Hat Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the…

4.6%EPSS