Skip to contentRed Hat, Inc. vulnerabilities
Newest
- red hat, inc. rpm, redhat enterprise linux +1 moreIt was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only...CVE-2021-35939Fix available6.7 Medium
- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 moreA symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and...CVE-2021-35938Fix available6.7 Medium
- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 moreA race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to...CVE-2021-35937Fix available6.4 Medium
- red hat, inc. rpmThere is a flaw in RPM's signature functionality. OpenPGP subkeys are associated with a primary...CVE-2021-3521Fix available4.7 Medium
- red hat, inc. jboss-remotingUncontrolled Resource Consumption in jboss-remotingCVE-2020-35510Fix available5.9 Medium
- red hat, inc. spice, redhat enterprise linux +1 moreA flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote...CVE-2021-20201Fix available5.3 Medium
- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the RPM package in the read functionality. This flaw allows an attacker who...CVE-2021-3421Fix available5.5 Medium
- red hat, inc. rpm, fedoraproject fedora +1 moreA flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can...CVE-2021-20266Fix available4.9 Medium
- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in RPM's signature check functionality when reading a package file. This flaw...CVE-2021-20271Fix available7.0 High
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA race condition vulnerability was found in the way the spice-vdagentd daemon handled new client...CVE-2020-25653Fix available6.3 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the spice-vdagentd daemon, where it did not properly handle client...CVE-2020-25652Fix available5.5 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the SPICE file transfer protocol. File data from the host system can end up...CVE-2020-25651Fix available6.4 Medium
- red hat, inc. spice-vdagent, debian linux, fedoraproject fedora +2 moreA flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system...CVE-2020-25650Fix available5.5 Medium
- red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 moreMultiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the...CVE-2020-14355Fix available6.6 Medium
- red hat, inc. jboss enterprise application platform, redhat jboss data grid, openshift application runtimes +1 more +3 moreThe issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...CVE-2020-17105.3 Medium
- red hat jboss brms, jboss enterprise application platform, jboss enterprise web server +3 more +5 moreEJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat...CVE-2012-56267.5 High
- openshift enterprise, red hat, inc. openshift enterprise, redhat openshift +2 moreA CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic...CVE-2013-0196Fix available6.5 Medium
- jboss as 7 jboss, redhat jboss application server, jboss enterprise application platform +2 moreAn Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper...CVE-2012-23127.8 High
- red hat jboss, redhat jboss operations network +1 moreA missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not...CVE-2010-07378.0 High
- red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 moreSpice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by...CVE-2019-3813Fix available7.5 High
- red hat jboss enterprise application platformIt was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise...CVE-2016-70667.8 High
- redhat openshift, red hat openshift enterprise, redhat openshift container platform +2 moreAn input validation flaw was found in the way OpenShift 3 handles requests for images. A user,...CVE-2016-8651Fix available3.1 Low
- red hat openshift enterprise, redhat openshift +1 moreThe OpenShift Enterprise 3 router does not properly sort routes when processing newly added...CVE-2016-8631Fix available6.3 Medium
- [unknown] jboss, redhat jboss enterprise application platform +1 moreIt was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is...CVE-2017-74648.7 High
- hawt hawtio, redhat jboss fuse +1 moreInsecure cookie sharing in HawtioCVE-2017-2589Fix available8.7 High
- ceph, debian linux, opensuse leap +7 more +9 moreA flaw was found in the way signature calculation was handled by cephx authentication protocol....CVE-2018-1129Fix available6.5 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreIt was found that cephx authentication protocol did not verify ceph clients correctly and was...CVE-2018-1128Fix available7.5 High
- ceph, redhat ceph storage, debian linux +6 more +8 moreA flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...CVE-2018-10861Fix available8.1 High
- [unknown] jboss, redhat jboss enterprise application platform +1 moreIt was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable...CVE-2017-74659.0 Critical
- [unknown] hawtiohawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker...CVE-2017-26177.6 High
- jboss jbossas, redhat jboss enterprise application platform +1 moreJboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in...CVE-2016-86567.0 High
- infinispan, redhat jboss data grid +1 moreDeserialization of Untrusted Data in InfinispanCVE-2018-1131Fix available8.8 High
- hawt hawtioPath Traversal in io.hawt:projectCVE-2017-2594Fix available5.4 Medium
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower through version 3.2.3 has a vulnerability that allows users only with access to...CVE-2018-11048.8 High
- red hat ansible tower, redhat cloudforms +1 moreAnsible Tower before version 3.2.4 has a flaw in the management of system and organization...CVE-2018-11017.2 High
- redhat openshift, red hat atomic-openshift +1 moreA flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An...CVE-2018-1102Fix available8.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...CVE-2018-1059Fix available6.1 Medium
- packagekit, canonical ubuntu linux, debian linux +6 more +8 moreAn authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users...CVE-2018-1106Fix available5.5 Medium
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...CVE-2018-1088Public exploitFix available8.1 High
- red hat, inc. openshiftOpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The...CVE-2017-75345.4 Medium
- moodleMoodle Improper AuthenticationCVE-2018-1082Fix available8.1 High
- moodleMoodle Unauthenticated users can trigger custom messages to admin via paypal enrol scriptCVE-2018-1081Fix available5.3 Medium
- etcd-io etcd, fedoraproject fedora +1 moreDNS Rebinding in etcdCVE-2018-1099Fix available5.5 Medium
- etcd-io etcd, fedoraproject fedora +1 moreetcd Cross-site Request Forgery (CSRF)CVE-2018-1098Fix available8.8 High
- curlcurl, as shipped in Red Hat Enterprise Linux 6 before version 7.19.7-53, did not correctly...CVE-2017-2628Fix available9.8 Critical
- keycloak, redhat single sign on +1 morekeycloak-core vulnerable to timing attacks against JWS token verificationCVE-2017-2585Fix available5.9 Medium
- red hat wildfly, redhat jboss wildfly application server +1 moreRed Hat Wildfly DoSCVE-2016-9589Fix available7.5 High
- keycloak, redhat single sign on +1 moreModerate severity vulnerability that affects org.keycloak:keycloak-coreCVE-2016-8629Fix available6.5 Medium
- red hat resteasyJBoss RESTEasy vulnerable to Improper Input ValidationCVE-2016-9606Fix available8.1 High
- apache http server, netapp storage automation store, red hat, inc. mod cluster +1 more +3 moreApache HTTP Server mod_cluster before version httpd 2.4.23 is vulnerable to an Improper Input...CVE-2016-86124.3 Medium
- Show olderLoading…