TI-2023-27712 CVE-2023-50782 · GHSA-3ww4-gg4f-jr7f
Python-cryptography: bleichenbacher timing oracle attack against rsa decryption - incomplete fix for cve-2020-25659
Priority HIGH 66
A flaw was found in the python-cryptography package.
Red Hat
Records7413All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical792CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9
Exploited now
Red Hat records in CISA KEVTI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability TI-2015-04610 ISC BIND Data Processing Errors Vulnerability TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability TI-2015-02874 Red Hat Libuser Race Condition Vulnerability TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records in Update Infrastructure · all components
TI-2026-08044 CVE-2026-9149 · GHSA-9q56-xf64-q987
Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file
Priority MEDIUM 62
A flaw was found in libsolv.
TI-2022-03352 CVE-2022-3644 · GHSA-qv37-mfjf-42h8
Insufficiently protected credentials in pulp_ansible
Priority MEDIUM 58
The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.
TI-2026-08132 CVE-2026-9256 · GHSA-h78r-86c6-jgp4
NGINX ngx_http_rewrite_module vulnerability
Priority MEDIUM 55
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.
TI-2026-30432 CVE-2026-42055 · GHSA-78jw-ww3g-9wp7
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
Priority MEDIUM 51
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules.
TI-2026-41777 CVE-2026-58016 · GHSA-8rpw-4xx7-27w7
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Priority MEDIUM 46
A flaw was found in GLib.
TI-2026-01754 CVE-2026-2100 · GHSA-hq85-3f6c-jx84
P11-kit: null dereference via c_derivekey with specific null parameters
Priority MEDIUM 41
A flaw was found in p11-kit.
TI-2026-36128 CVE-2026-48864 · GHSA-2927-mfhv-37vh
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Priority LOW 35
A flaw was found in libsolv.
TI-2023-27711 CVE-2023-50781 · GHSA-944j-8ch6-rf6x
M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657
Priority LOW 35
A flaw was found in m2crypto.
TI-2026-08045 CVE-2026-9150 · GHSA-p4w9-3pj8-mhq7
Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
Priority LOW 29
A flaw was found in libsolv.
TI-2013-03965 CVE-2013-4518 · GHSA-pv88-mwjw-4mh6
RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates
Priority LOW 24
RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates