Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8, satellite 6.15 for rhel 8 +2 more +4 moreForeman: read-only access to entire db from templatesCVE-2024-8553Fix available6.3 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +2 moreMpg123: buffer overflow when writing decoded pcm samplesCVE-2024-10573Fix available6.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +15 more +17 moreXorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerabilityCVE-2024-9632Fix available7.8 High
- red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9, satellite 6.17 for rhel 9 +2 more +4 moreRexml: rexml: denial of service via inefficient regex parsingCVE-2025-10990Fix available7.5 High
- red hat 3scale api management platform 2, redhat 3scale api management +1 moreGateway: apicast basic auth bypass via malformed base64 headerssending non-base64 'basic' auth with special characters causes apicast to incorrectly authenticate a requestCVE-2024-102957.5 High
- linux-pam, red hat enterprise linux 10, enterprise linux 7 +3 more +5 morePam: libpam: libpam vulnerable to read hashed passwordCVE-2024-10041Fix available4.7 Medium
- red hat openshift container platform 4.16, openshift container platform 4.17, openshift container platform 4.18 +1 more +3 moreGraphql: information disclosure via graphql introspection in openshiftCVE-2024-503125.3 Medium
- red hat openshift container platform 4.18, redhat openshift container platform +1 moreGraphql: denial of service (dos) vulnerability via graphql batchingCVE-2024-503116.5 Medium
- red hat build of keycloak, fuse 7, jboss data grid 7 +14 more +16 moreWildfly: wildfly vulnerable to cross-site scripting (xss)CVE-2024-10234Fix available6.1 Medium
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 7.7 advanced update support +13 more +15 moreNetworkmanager-libreswan: local privilege escalation via leftupdownCVE-2024-9050Fix available7.8 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerabilityCVE-2024-6519Fix available8.2 High
- redhat quay, red hat quay 3 +1 moreQuay: quay allows successful authentication with trucated version of the passwordCVE-2024-96834.8 Medium
- apple ipados, macos, safari +17 more +19 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.2 and iPadOS...CVE-2023-43010Fix available8.8 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, redhat ansible automation platform +2 more +4 moreAap-gateway: xss on aap-gatewayCVE-2024-100336.1 Medium
- red hat openshift developer tools and services, enterprise linux 10, enterprise linux 8 +25 more +27 morePodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)CVE-2024-9676Fix available6.5 Medium
- red hat ansible automation platform 2, enterprise linux 10, enterprise linux 8 +1 more +3 morePyo3: risk of use-after-free in `borrowed` reads from python weak referencesCVE-2024-9979Fix available5.3 Medium
- red hat 3scale api management platform 2, redhat 3scale api management platform +1 moreSystem: pdf invoices of the developer users can be seen if the url is knownCVE-2024-96715.3 Medium
- buildah project buildah, red hat openshift developer tools and services, enterprise linux 10 +30 more +32 moreBuildah: buildah allows arbitrary directory mountCVE-2024-9675Fix available7.8 High
- red hat jboss data grid 7, jboss enterprise application platform 7, jboss enterprise application platform 8 +1 more +3 moreResteasy-netty4-cdi: resteasy-netty4: resteasy-reactor-netty: http request smuggling leading to client timeouts in resteasy-netty4CVE-2024-9622Fix available5.3 Medium
- red hat build of apache camel 4.4 for quarkus 3.8Io.quarkiverse.cxf:quarkus-cxf: quarkus cxf may log user password and secret to application logCVE-2024-9621Fix available5.3 Medium
- red hat ansible automation platform 2Event-driven automation in ansible automation platform (aap): ansible event-driven automation (eda) lacks encryptionCVE-2024-96205.3 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreBuildah: podman: improper input validation in bind-propagation option of dockerfile run --mount instructionCVE-2024-9407Fix available4.7 Medium
- containers common, red hat enterprise linux 10, enterprise linux 8 +10 more +12 morePodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go libraryCVE-2024-9341Fix available5.4 Medium
- red hat nbde tang server, openshift developer tools and services, openshift pipelines +34 more +36 moreGolang-fips: golang fips zeroed bufferCVE-2024-9355Fix available6.5 Medium
- red hat satellite 6, satellite 6.12 for rhel 8 +1 moreForeman: foreman: oauth secret exposure via unauthenticated access to the graphql apiCVE-2024-68617.5 High
- red hat migration toolkit for applications 6, migration toolkit for runtimes 1 on rhel 8, build of apache camel for spring boot 3 +21 more +23 moreUndertow: cookie smuggling/spoofingCVE-2023-4639Fix available7.4 High
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +4 more +6 moreUndertow: unrestricted request storage leads to memory exhaustionCVE-2023-1973Fix available7.5 High
- ovirt ovirt-engine, red hat virtualization 4 +1 moreOvirt-engine: potential exposure of cleartext provider passwords via web uiCVE-2024-72594.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: information leak in virtio devicesCVE-2024-8612Fix available3.8 Low
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +13 more +15 moreKeycloak: vulnerable redirect uri validation results in open redirecCVE-2024-8883Fix available6.1 Medium
- red hat build of keycloak, build of keycloak 22, build of keycloak 24 +8 more +10 moreKeycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloakCVE-2024-8698Public exploitFix available7.7 High
- qemu, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreQemu-kvm: usb: assertion failure in usb_ep_get()CVE-2024-8354Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmpost symlink attack allows escalating pcp to root userCVE-2024-45770Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +12 more +14 morePcp: pmcd heap corruption through metric pmstore operationsCVE-2024-45769Fix available5.5 Medium
- red hat enterprise linux ai (rhel ai)Vllm: denials of service in vllm json web apiCVE-2024-89396.2 Medium
- red hat enterprise linux ai (rhel ai)Vllm: a completions api request with an empty prompt will crash the vllm api server.CVE-2024-8768Fix available7.5 High
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift-controller-manager: elevated build pods can lead to node compromise in openshiftCVE-2024-45496Fix available9.9 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategyCVE-2024-73879.1 Critical
- red hat ansible automation platform execution environments, discovery 1 for rhel 9, ansible automation platform 2.4 for rhel 8 +7 more +9 moreAnsible-core: exposure of sensitive information in ansible vault files due to improper loggingCVE-2024-8775Fix available5.5 Medium
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 moreAutomation-controller: gain access to the k8s api server via job execution with container groupCVE-2024-68406.6 Medium
- redhat keycloak, red hat build of quarkus, fuse 7 +6 more +8 moreKeycloak: amount of attributes per object is not limited and it may lead to dosCVE-2023-6841Fix available7.5 High
- redhat keycloak, red hat build of keycloak, build of keycloak 22 +8 more +10 moreWildfly-elytron: org.keycloak/keycloak-services: session fixation in elytron saml adaptersCVE-2024-7341Fix available7.1 High
- red hat build of keycloak, build of keycloak 24 +1 moreKeycloak-core: one time passcode (otp) is valid longer than expiration timeseverityCVE-2024-7318Fix available4.8 Medium
- redhat keycloak, red hat build of keycloak, build of keycloak 24 +2 moreKeycloak-core: open redirect on account pageCVE-2024-7260Fix available6.1 Medium
- opensc project opensc, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLibopensc: heap buffer overflow in openpgp driver when generating keyCVE-2024-8443Fix available2.9 Low
- red hat migration toolkit for virtualization 2.6Migration toolkit for virtualization: forklift-controller: empty bearer token may perform authenticationCVE-2024-85097.5 High
- red hat directory server 11, directory server 12, enterprise linux 10 +4 more +6 more389-ds-base: server crash while modifying `userpassword` using malformed input (incomplete fix for cve-2024-2199)CVE-2024-8445Fix available5.7 Medium
- containers aardvark-dns, red hat enterprise linux 10, enterprise linux 8 +2 more +4 moreContainers/aardvark-dns: tcp query handling flaw in aardvark-dns leading to denial of serviceCVE-2024-8418Fix available7.5 High
- redhat satellite, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +4 more +6 morePuppet-pulpcore: an authentication bypass vulnerability exists in pulpcoreCVE-2024-7923Fix available9.8 Critical
- redhat satellite, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +3 more +5 morePuppet-foreman: an authentication bypass vulnerability exists in foremanCVE-2024-70129.8 Critical
- Show moreLoading…