All products

Red Hat Enterprise Linux 6/pcs

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Remote code execution in handlebars when compiling templatesCVE-2021-23369 · GHSA-F2JV-R9RF-7988 org.webjars.bowergithub.wycats:handlebars.jsorg.webjars.npm:handlebars MavennpmRed Hat Critical Fix reported
Prototype Pollution in handlebarsCVE-2021-23383 · GHSA-765H-QJXV-5F44 handlebarsOpenShift Service Mesh 2.0/servicemesh-grafana npmRed Hat Critical Fix reported
Potential XSS vulnerability in jQueryCVE-2020-11022 · GHSA-GXR4-XJJ5-5PX2 athlon1600/youtube-downloadercomponents/jquery ComposerMavennpmNuGetRed HatRubyGems Medium Fix reported
Potential XSS vulnerability in jQueryCVE-2020-11023 · GHSA-JPCQ-CGW6-V4J6 components/jqueryorg.webjars.npm:jquery ComposerMavennpmNuGetRed HatRubyGemsWordPress Medium Fix reported
Cross-Site Scripting in jqueryCVE-2020-7656 · GHSA-Q4M3-2J7H-F7XW org.webjars.npm:jqueryjquery MavennpmNuGetRed HatRubyGems Medium Fix reported
rack-protection gem timing attack vulnerability when validating CSRF tokenCVE-2018-1000119 · GHSA-688C-3X49-6RQJ Red Hat Ceph Storage 1.3/rubygem-rack-protectionRed Hat Enterprise Linux 6/pcs Red HatRubyGems Medium Fix reported
pcs: cookies are not invalidated upon logoutCVE-2016-0721 Red Hat Enterprise Linux 6/pcs Red Hat Medium No fix reported
pcs: Cross-Site Request Forgery in web UICVE-2016-0720 Red Hat Enterprise Linux 6/pcs Red Hat Medium No fix reported
pcs: Improper node name field validation when creating clusters leads to XSSCVE-2017-2661 Red Hat Enterprise Linux 6/pcsRed Hat Enterprise Linux 7/pcs Red Hat Low No fix reported