Skip to content[unknown] vulnerabilities
Newest
- debian linux, linux kernel, [unknown] kernel: +2 more +4 moreA security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an...CVE-2018-16862Fix available5.3 Medium
- powerdns recursor, [unknown] pdns +1 moreAn issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote...CVE-2018-14644Fix available5.3 Medium
- [unknown] richfaces, red hat jboss richfaces framework, redhat enterprise linux +2 moreRichfaces vulnerable to arbitrary code executionCVE-2018-14667In KEVPublic exploitFix availableEPSS 70.8%9.8 Critical
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might...CVE-2018-16845Fix available8.2 High
- [unknown] nginx, apple xcode, canonical ubuntu linux +1 more +3 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...CVE-2018-16844Fix availableEPSS 12.7%5.3 Medium
- [unknown] nginx, apple xcode, canonical ubuntu linux +2 more +4 morenginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that...CVE-2018-16843Public exploitFix availableEPSS 48.0%5.3 Medium
- [unknown] openstack-mistralopenstack-mistral Discloses the presence of arbitrary files within the filesystemCVE-2018-16849Fix available3.1 Low
- qemu, [unknown] qemu:, canonical ubuntu linux +2 moreAn OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It...CVE-2018-16847Fix available7.0 High
- [unknown] glusterfs, debian linux, redhat enterprise linux server +2 more +4 moreA flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated...CVE-2018-14660Fix available6.5 Medium
- [unknown] glusterfs, debian linux, redhat enterprise linux +2 moreIt was found that the fix for CVE-2018-10927, CVE-2018-10928, CVE-2018-10929, CVE-2018-10930, and...CVE-2018-14651Fix available8.8 High
- [unknown] dashbuilder, redhat jboss bpm suite +1 moreJBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice...CVE-2016-63436.1 Medium
- [unknown] cfme, redhat cloudforms, cloudforms management engine +2 moreA code injection flaw was found in the way capacity and utilization imported control files are...CVE-2016-5402Fix available8.8 High
- [unknown] redis, redhat openstack +1 moreA permissions flaw was found in redis, which sets weak permissions on certain files and...CVE-2016-2121Fix available4.0 Medium
- [unknown] ansible, debian linux, redhat ansible engine +2 more +4 moreAnsible Leaks Data Passed to ssh-keygenCVE-2018-16837Fix available7.8 High
- [unknown] libssh, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4....CVE-2018-10933Public exploitFix availableEPSS 91.8%9.1 Critical
- [unknown] foremanA flaw was found in foreman from versions 1.18. A stored cross-site scripting vulnerability...CVE-2018-146645.4 Medium
- redhat ceph storage, [unknown] ceph-iscsi-cli, redhat enterprise linux desktop +2 more +4 moreIt was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using...CVE-2018-14649Fix availableEPSS 12.0%9.8 Critical
- [unknown] kernelA missing address check in the callers of the show_opcodes() in the Linux kernel allows an...CVE-2018-14656Fix available7.0 High
- fedoraproject 389 directory server, [unknown] 389-ds-base:, debian linux +1 more +3 moreA flaw was found in 389 Directory Server. A specially crafted search query could lead to...CVE-2018-14648Fix available7.5 High
- [unknown] sos-collector, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that sos-collector does not properly set the default permissions of newly...CVE-2018-14650Fix available5.9 Medium
- theforeman foreman, [unknown] smart proxy dynflow +1 moresmart_proxy_dynflow gem authentication bypass in Foreman remote execution featureCVE-2018-14643Fix available9.8 Critical
- [unknown] haproxy, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreA flaw was discovered in the HPACK decoder of HAProxy, before 1.8.14, that is used for HTTP/2. An...CVE-2018-14645Fix available7.5 High
- [unknown] moodleMoodle Cross-site ScriptingCVE-2018-14631Fix available8.8 High
- [unknown] moodleMoodle XML import of ddwtos could lead to intentional remote code executionCVE-2018-14630Fix available8.8 High
- [unknown] kernel, debian linux, canonical ubuntu linux +2 moreA flaw was found in the Linux Kernel where an attacker may be able to have an uncontrolled read...CVE-2018-14625Fix available5.3 Medium
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +6 more +8 moreA vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16....CVE-2018-14624Fix available7.5 High
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...CVE-2018-14618Fix availableEPSS 10.7%7.5 High
- redhat wildfly, [unknown] jboss/wildfly +1 moreThe IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when...CVE-2018-14627Fix available5.3 Medium
- [unknown] libtirpcAn infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to...CVE-2018-146215.3 Medium
- [unknown] postgresql, postgresql jdbc driver, redhat enterprise linux +2 moreModerate severity vulnerability that affects org.postgresql:pgjdbc-aggregateCVE-2018-10936Public exploitFix available8.1 High
- [unknown] kernelA flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The ...CVE-2018-14619Fix available6.2 Medium
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...CVE-2018-14622Fix available5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...CVE-2018-10846Fix available5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...CVE-2018-10845Fix available5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...CVE-2018-10844Fix available5.9 Medium
- spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 moreA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...CVE-2018-10873Fix available8.3 High
- [unknown] pulpWithdrawn Advisory: Pulp Improper Path ParsingCVE-2018-10917Fix available6.8 Medium
- redhat certification, [unknown] redhat-certification: +1 moreAn uncontrolled resource consumption flaw has been discovered in redhat-certification in the way...CVE-2018-108645.3 Medium
- [unknown] atomic-openshift, redhat openshift container platform +1 moreThe OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker...CVE-2017-151385.0 Medium
- [unknown] vdsm, redhat virtualization +1 moreIt was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without...CVE-2018-10908Fix available6.5 Medium
- [unknown] jenkins-email-ext, jenkins email extension +1 moreEmails were sent to addresses not associated with actual users of Jenkins by Email Extension PluginCVE-2017-2654Fix available3.7 Low
- [unknown] ttembedAn input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to...CVE-2018-109227.5 High
- [unknown] ttembedCertain input files may trigger an integer overflow in ttembed input file processing. This...CVE-2018-109214.3 Medium
- [unknown] fuse, redhat jboss fuse, jboss a-mq +2 moreIt was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the...CVE-2016-86535.3 Medium
- [unknown] lftp, canonical ubuntu linux, opensuse leap +2 moreIt has been discovered that lftp up to and including version 4.8.3 does not properly sanitize...CVE-2018-10916Fix available5.3 Medium
- [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 moreA vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When...CVE-2018-10898Fix available8.8 High
- [unknown] cloudforms, redhat cloudforms management engine +1 moreA number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed...CVE-2017-2653Fix available4.1 Medium
- [unknown] cfme, redhat cloudforms management engine +1 moreThe dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud...CVE-2017-74974.1 Medium
- [unknown] wildfly, redhat jboss enterprise application platform +1 moreIt was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows...CVE-2017-25957.7 High
- [unknown] cloudforms, redhat cloudforms management engine +1 moreA flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the...CVE-2017-151256.5 Medium
- Show moreLoading…