Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:*

part: a version: 4.3 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductVirtualization Manager (f3374dc0-91cd-5004-b7dc-a12651b75b63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-8331 vulnerable 2026-06-08 05:14:23.853434 Details available
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
Published: 2019-02-20T16:00:00.000Z
Updated: 2024-08-04T21:17:31.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11358 vulnerable 2026-06-08 05:12:36.944053 Details available
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Published: 2019-04-19T00:00:00.000Z
Updated: 2024-11-15T15:11:23.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10744 vulnerable 2026-06-08 05:12:25.185417 Details available
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.
Published: 2019-07-25T23:43:03.000Z
Updated: 2024-08-04T22:32:01.271Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10194 vulnerable 2026-06-08 05:12:22.484945 Details available
MEDIUM (5.9)
Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.
Published: 2019-07-11T18:33:06.000Z
Updated: 2024-08-04T22:17:18.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3639 vulnerable 2026-06-08 05:11:40.459992 Details available
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Published: 2018-05-22T12:00:00.000Z
Updated: 2026-05-29T20:14:05.872Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17963 vulnerable 2026-06-08 05:11:07.059184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-17958 vulnerable 2026-06-08 05:11:07.038431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16881 vulnerable 2026-06-08 05:11:05.718422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.