Security
فارسی
All products

Red Hat Certification for Red Hat Enterprise Linux 7/redhat-certification

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip ComponentsCVE-2025-1647 · GHSA-Q58R-HWC8-RM9J bootstrapRed Hat Ceph Storage 4/ceph npmRed Hat Medium No fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web site with non-Chromium based browserCVE-2025-30360 · GHSA-9JGG-88MC-972H webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
webpack-dev-server users' source code may be stolen when they access a malicious web siteCVE-2025-30359 · GHSA-4V9V-HFQ4-RM2V webpack-dev-serverCryostat 4/io.cryostat-cryostat npmRed Hat Medium Fix reported
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSSCVE-2024-43788 · GHSA-4VVJ-4CPR-P986 webpackLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel8 npmRed Hat Medium Fix reported
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributesCVE-2024-6485 · GHSA-VXMC-5X29-H64V bootstrapRed Hat AMQ Broker 7/bootstrap npmRed Hat Medium No fix reported
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attackCVE-2023-46234 · GHSA-X9W5-V3Q2-3RHW browserify-signOpenShift Pipelines/openshift-pipelines/pipelines-hub-api-rhel8 npmRed Hat High Fix reported
semver vulnerable to Regular Expression Denial of ServiceCVE-2022-25883 · GHSA-C2QF-RXJJ-QQGW semverMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat High Fix reported
tough-cookie Prototype Pollution vulnerabilityCVE-2023-26136 · GHSA-72XF-G2V4-QVF3 tough-cookieMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)CVE-2022-37599 · GHSA-HHQ3-FF78-JV3G loader-utilsMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
GitPython vulnerable to remote code execution due to insufficient sanitization of input argumentsCVE-2023-40267 · GHSA-PR76-5CM5-W9CJVersion ranges need review. gitpythonRed Hat Ansible Tower 3/gitpython PyPIRed Hat Critical Fix reported
GitPython blind local file inclusionCVE-2023-41040 · GHSA-CWVM-V4W8-Q58CVersion ranges need review. gitpythonRed Hat Certification Program for Red Hat Enterprise Linux 9/redhat-certification PyPIRed Hat Medium Fix reported
redhat-certification: billion laugh attack when getting the status of a hostCVE-2018-10868 Red Hat Certification for Red Hat Enterprise Linux 7/redhat-certification Red Hat Medium No fix reported
redhat-certification: /rhcert allows to download any file under /var/www/rhcert directoryCVE-2019-3897 Red Hat Certification for Red Hat Enterprise Linux 6/redhat-certificationRed Hat Certification for Red Hat Enterprise Linux 7/redhat-certification Red Hat Medium No fix reported
redhat-certification: /uploads/results page allows to remove filesCVE-2018-10867 Red Hat Certification for Red Hat Enterprise Linux 7/redhat-certification Red Hat Medium No fix reported
redhat-certification: remove a "system" file without authorizationCVE-2018-10866 Red Hat Certification for Red Hat Enterprise Linux 7/redhat-certification Red Hat Low No fix reported
redhat-certification: "restart" a node without authorizationCVE-2018-10865 Red Hat Certification for Red Hat Enterprise Linux 7/redhat-certification Red Hat Low No fix reported
redhat-certification: directory listing in /rhcert-transferCVE-2018-10863 Red Hat Certification for Red Hat Enterprise Linux 7/redhat-certification Red Hat Low No fix reported
jquery: Cross-site scriptingCVE-2020-23064 Red Hat Ceph Storage 3/grafanaRed Hat Certification for Red Hat Enterprise Linux 6/redhat-certification-backend Red Hat Medium No fix reported