Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 7/pki-core
Red Hat
· Package
15 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
CVE-2019-11358 · DRUPAL-CORE-2019-006
Version ranges need review.
drupal/core
maximebf/debugbar
Composer
Maven
npm
NuGet
PyPI
Red Hat
RubyGems
Medium
Fix reported
2026-09-19
Bootstrap vulnerable to Cross-Site Scripting (XSS)
CVE-2018-14040 · GHSA-3WQF-4X89-9G79
twbs/bootstrap
org.webjars:bootstrap
Composer
Maven
npm
NuGet
Red Hat
RubyGems
Medium
Fix reported
2026-09-10
Bootstrap Vulnerable to Cross-Site Scripting
CVE-2019-8331 · GHSA-9V3M-8FP8-MJ99
twbs/bootstrap
org.webjars:bootstrap
Composer
Maven
npm
NuGet
Red Hat
RubyGems
Medium
Fix reported
2026-09-10
Bootstrap Cross-site Scripting vulnerability
CVE-2016-10735 · GHSA-4P24-VMCR-4GQJ
twbs/bootstrap
org.webjars:bootstrap
Composer
Maven
npm
NuGet
Red Hat
RubyGems
Medium
Fix reported
2026-09-10
Bootstrap Cross-site Scripting vulnerability
CVE-2018-14042 · GHSA-7MVR-5X2G-WFC8
twbs/bootstrap
org.webjars:bootstrap
Composer
Maven
npm
NuGet
Red Hat
RubyGems
Medium
Fix reported
2026-09-10
Potential XSS vulnerability in jQuery
CVE-2020-11022 · GHSA-GXR4-XJJ5-5PX2
athlon1600/youtube-downloader
components/jquery
Composer
Maven
npm
NuGet
Red Hat
RubyGems
Medium
Fix reported
2026-07-09
Arbitrary Code Execution in underscore
CVE-2021-23358 · GHSA-CF4H-3JHX-XVHQ
underscore
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/grc-ui-rhel8
npm
Red Hat
Critical
Fix reported
2025-11-04
Cross-Site Scripting (XSS) in jquery
CVE-2015-9251 · GHSA-RMXG-73GG-4P98
org.webjars.npm:jquery
jquery
Maven
npm
NuGet
Red Hat
RubyGems
Medium
Fix reported
2024-03-10
System: multiple XSS flaws
CVE-2012-2662
Red Hat Enterprise Linux 7/pki-core
Red Hat
Medium
No fix reported
Not recorded
pki: Dogtag's python client does not validate certificates
CVE-2020-15720
Red Hat Enterprise Linux 6/pki-core
Red Hat Enterprise Linux 7/pki-core
Red Hat
Medium
No fix reported
Not recorded
pki-core: dogtag-pki: redhat-pki: pki-core: CA renewal request processing omits realm authorization check performed by enrollment path
CVE-2026-17039
Red Hat Certificate System 10/redhat-pki
Red Hat Certificate System 11/redhat-pki
Red Hat
Low
No fix reported
Not recorded
dogtag-pki: pki-core: redhat-pki: pki: ACME admin enable/disable endpoint authentication bypass via trailing slash
CVE-2026-18047
Red Hat Certificate System 10/redhat-pki:10/redhat-pki
Red Hat Certificate System 11/redhat-pki
Red Hat
Medium
No fix reported
Not recorded
dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects
CVE-2026-18369
Red Hat Certificate System 10/redhat-pki:10/redhat-pki
Red Hat Certificate System 11/redhat-pki
Red Hat
Medium
No fix reported
Not recorded
pki-core: dogtag-pki: Unauthenticated Dogtag CA REST API exposes Security Domain Hosts
CVE-2026-53682
Red Hat Certificate System 9/pki-core
Red Hat Enterprise Linux 10/dogtag-pki
Red Hat
Medium
No fix reported
Not recorded
pki-core: dogtag-pki: empty request to Dogtag /ca/rest/certrequests causes HTTP 500, java exception, and stacktrace disclosure
CVE-2026-11873
Red Hat Certificate System 9/pki-core
Red Hat Enterprise Linux 10/dogtag-pki
Red Hat
Medium
No fix reported
Not recorded
