| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-8676 | Cri-o: checkpoint restore can be triggered from different namespaces | - | - | High | 7.4 | 2024-11-26 19:15:48 | Deep Dive |
| CVE-2024-52337 | Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method | - | - | Medium | 5.5 | 2024-11-26 15:21:18 | Deep Dive |
| CVE-2024-52336 | Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root | - | - | High | 7.8 | 2024-11-26 15:21:14 | Deep Dive |
| CVE-2024-10492 | Keycloak-quarkus-server: keycloak path trasversal | - | - | 低危 | - | 2024-11-25 07:37:31 | Deep Dive |
| CVE-2024-10451 | Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process | Red Hat | Red Hat build of Keycloak 24 | Medium | 5.9 | 2024-11-25 07:37:05 | Deep Dive |
| CVE-2024-10270 | Org.keycloak:keycloak-services: keycloak denial of service | - | - | Medium | 6.5 | 2024-11-25 07:37:05 | Deep Dive |
| CVE-2024-9666 | Org.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerability | - | - | Medium | 4.7 | 2024-11-25 07:29:52 | Deep Dive |
| CVE-2024-6538 | Openshift-console: openshift console: server-side request forgery | - | - | Medium | 5.3 | 2024-11-25 06:15:13 | Deep Dive |
| CVE-2024-11483 | Automation-gateway: aap-gateway: improper scope handling in oauth2 tokens for aap 2.5 | - | - | Medium | 5.0 | 2024-11-25 03:54:34 | Deep Dive |
| CVE-2024-52616 | Avahi: avahi wide-area dns predictable transaction ids | - | - | Medium | 5.3 | 2024-11-21 20:41:12 | Deep Dive |
| CVE-2024-52615 | Avahi: avahi wide-area dns uses constant source port | - | - | Medium | 5.3 | 2024-11-21 20:34:01 | Deep Dive |
| CVE-2023-39180 | Kernel: ksmbd: read request memory leak denial-of-service vulnerability | - | - | Medium | 4.0 | 2024-11-18 09:53:20 | Deep Dive |
| CVE-2023-39179 | Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability | - | - | High | 7.5 | 2024-11-18 09:51:10 | Deep Dive |
| CVE-2023-39176 | Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability | - | - | Medium | 5.8 | 2024-11-18 09:50:46 | Deep Dive |
| CVE-2024-0793 | Kube-controller-manager: malformed hpa v1 manifest causes crash | - | - | High | 7.7 | 2024-11-17 10:45:50 | Deep Dive |
| CVE-2023-6110 | Openstack: deleting a non existing access rule deletes another existing access rule in it's scope | Red Hat | Red Hat OpenStack Platform 17.1 for RHEL 8 | Medium | 5.5 | 2024-11-17 10:22:35 | Deep Dive |
| CVE-2023-4639 | Undertow: cookie smuggling/spoofing | Red Hat | Migration Toolkit for Runtimes 1 on RHEL 8 | High | 7.4 | 2024-11-17 10:21:45 | Deep Dive |
| CVE-2023-1419 | Debezium: script injection via connector parameter | Red Hat | Red Hat build of Debezium | Medium | 5.9 | 2024-11-17 10:20:36 | Deep Dive |
| CVE-2023-0657 | Keycloak: impersonation via logout token exchange | - | - | Low | 3.4 | 2024-11-17 10:19:04 | Deep Dive |
| CVE-2020-25720 | Samba: check attribute access rights for ldap adds of computers | - | - | High | 7.5 | 2024-11-17 10:17:08 | Deep Dive |