Virtualization Manager (Redhat) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2022-03-03. Vendor: Redhat.
CVEs of Virtualization Manager
- CVE-2021-3620 - CVSS 5.5 (medium), 2022-03-03: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in…
- CVE-2019-11135 - CVSS 6.5 (medium), 2019-11-14: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via…
- CVE-2019-10744 - CVSS 9.1 (critical), 2019-07-26: Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of…
- CVE-2019-10194 - CVSS 5.9 (medium), 2019-07-11: Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be…
- CVE-2019-11358 - CVSS 6.1 (medium), 2019-04-20: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an…
- CVE-2019-8331 - CVSS 6.1 (medium), 2019-02-20: In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
- CVE-2018-16881 - CVSS 7.5 (high), 2019-01-25: A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which…
- CVE-2018-17963 - CVSS 9.8 (critical), 2018-10-09: qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have…
- CVE-2018-17958 - CVSS 7.5 (high), 2018-10-09: Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer data type is used.
- CVE-2017-7481 - CVSS 9.8 (critical), 2018-07-19: Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of lookup()…
- CVE-2018-3639 - CVSS 5.5 (medium), 2018-05-22: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are…
- CVE-2018-1059 - CVSS 6.1 (medium), 2018-04-24: The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical…
- CVE-2017-9214 - CVSS 9.8 (critical), 2017-05-23: In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned…
