Red Hat Openshift 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:openshift:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Openshift (c1e101a6-4198-51dc-8dd3-fad3fe32c7b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openshift/okd |
purl2cpe | 2026-06-01 10:12:54.179082 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-1000376 |
vulnerable | 2026-06-08 05:08:34.448760 |
Details available
libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.
Published: 2017-06-19T16:00:00.000Z
Updated: 2024-08-05T22:00:41.083Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5409 |
vulnerable | 2026-06-08 05:07:56.955843 |
Details available
Red Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the GEARID cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
Published: 2017-04-20T17:00:00.000Z
Updated: 2024-08-06T01:01:00.226Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7539 |
vulnerable | 2026-06-08 05:07:01.276123 |
Details available
The Plugins Manager in Jenkins before 1.640 and LTS before 1.625.2 does not verify checksums for plugin files referenced in update site data, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a crafted plugin.
Published: 2016-02-03T15:00:00.000Z
Updated: 2024-08-06T07:51:28.450Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7538 |
vulnerable | 2026-06-08 05:07:01.275737 |
Details available
Jenkins before 1.640 and LTS before 1.625.2 allow remote attackers to bypass the CSRF protection mechanism via unspecified vectors.
Published: 2016-02-03T15:00:00.000Z
Updated: 2024-08-06T07:51:28.455Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7537 |
vulnerable | 2026-06-08 05:07:01.275190 |
Details available
Cross-site request forgery (CSRF) vulnerability in Jenkins before 1.640 and LTS before 1.625.2 allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via vectors related to the HTTP GET method.
Published: 2016-02-03T15:00:00.000Z
Updated: 2024-08-06T07:51:28.599Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5326 |
vulnerable | 2026-06-08 05:06:49.576710 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5325 |
vulnerable | 2026-06-08 05:06:49.576043 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5324 |
vulnerable | 2026-06-08 05:06:49.575559 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5323 |
vulnerable | 2026-06-08 05:06:49.575209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5322 |
vulnerable | 2026-06-08 05:06:49.574849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5321 |
vulnerable | 2026-06-08 05:06:49.574485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5320 |
vulnerable | 2026-06-08 05:06:49.574166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5319 |
vulnerable | 2026-06-08 05:06:49.573772 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5318 |
vulnerable | 2026-06-08 05:06:49.573373 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5317 |
vulnerable | 2026-06-08 05:06:49.571457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5254 |
vulnerable | 2026-06-08 05:06:49.345683 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0238 |
vulnerable | 2026-06-08 05:06:14.055737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3674 |
vulnerable | 2026-06-08 05:05:42.334379 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3602 |
vulnerable | 2026-06-08 05:05:33.697457 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3496 |
vulnerable | 2026-06-08 05:05:33.042072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0233 |
vulnerable | 2026-06-08 05:05:12.409527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.