Search for packages
| purl | pkg:rpm/redhat/ovirt-engine-api-explorer@0.0.5-1?arch=el7ev |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3s9f-prpy-hbcx
Aliases: CVE-2019-11358 GHSA-6c3j-c64m-qhgq |
Cross-site Scripting The jQuery library, which is included in rdoc, mishandles `jQuery.extend(true, {}, ...)` because of Object.prototype pollution. If an unsanitized source object contained an enumerable `__proto__` property, it could extend the native `Object.prototype.` | There are no reported fixed by versions. |
|
VCID-br4c-7x9j-g3f6
Aliases: CVE-2018-20676 GHSA-3mgp-fx93-9xv5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the tooltip data-viewport attribute. | There are no reported fixed by versions. |
|
VCID-eh2s-9hss-yken
Aliases: CVE-2016-10735 GHSA-4p24-vmcr-4gqj |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. | There are no reported fixed by versions. |
|
VCID-hqne-7h6h-3ff8
Aliases: CVE-2018-20677 GHSA-ph58-4vrj-w6hr |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the affix configuration target property. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:36:05.015973+00:00 | RedHat Importer | Affected by | VCID-eh2s-9hss-yken | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10735.json | 38.0.0 |
| 2026-04-01T14:22:52.744711+00:00 | RedHat Importer | Affected by | VCID-hqne-7h6h-3ff8 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20677.json | 38.0.0 |
| 2026-04-01T14:22:52.586703+00:00 | RedHat Importer | Affected by | VCID-br4c-7x9j-g3f6 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20676.json | 38.0.0 |
| 2026-04-01T14:20:40.450647+00:00 | RedHat Importer | Affected by | VCID-3s9f-prpy-hbcx | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json | 38.0.0 |