Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptCVE-2024-11831Fix available5.4 Medium
- red hat enterprise linux 10, enterprise linux 9, openshift container platform 4 +2 more +4 moreUsers: `root` appended to group listingsCVE-2025-5791Fix available7.1 High
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFreeipa: administrative user data leaked through systemd journalCVE-2024-11029Fix available5.5 Medium
- red hat jboss data grid 7, jboss enterprise application platform 7, jboss enterprise application platform 8 +2 more +4 moreOrg.jboss.hal:hal-console: wildfly hal console cross-site scriptingCVE-2025-23366Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: denial of service in keycloak server via security headersCVE-2024-11734Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 26.0, jboss enterprise application platform 8 +2 more +4 moreOrg.keycloak:keycloak-quarkus-server: unrestricted admin use of system and environment variablesCVE-2024-11736Fix available4.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRuby: openssl: ruby marvin attackCVE-2025-03067.4 High
- red hat discovery 1.14, enterprise linux 10, enterprise linux 6 +4 more +6 moreRsync: race condition in rsync handling symbolic linksCVE-2024-12747Fix available5.6 Medium
- samba rsync, almalinux, archlinux arch linux +24 more +26 moreRsync: --safe-links option bypass leads to path traversalCVE-2024-12088Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +32 more +34 moreRsync: path traversal vulnerability in rsyncCVE-2024-12087Fix available6.5 Medium
- samba rsync, almalinux, archlinux arch linux +13 more +15 moreRsync: rsync server leaks arbitrary client filesCVE-2024-12086Fix available6.1 Medium
- samba rsync, almalinux, archlinux arch linux +44 more +46 moreRsync: info leak via uninitialized stack contentsCVE-2024-12085Public exploitFix available7.5 High
- samba rsync, almalinux, archlinux arch linux +11 more +13 moreRsync: heap buffer overflow in rsync due to improper checksum length handlingCVE-2024-12084Public exploitFix availableEPSS 72.5%9.8 Critical
- red hat jboss data grid 7, jboss eap xp 5.0 update 2.0, jboss enterprise application platform 7 +4 more +6 moreNarayana: deadlock via multiple join requests sent to lra coordinatorCVE-2024-8447Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in lib/openjp2/j2k.cCVE-2024-56827Fix available5.6 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreOpenjpeg: heap buffer overflow in bin/common/color.cCVE-2024-56826Fix available5.6 Medium
- red hat fuse 7, openshift container platform 4.12, openshift container platform 4.13 +6 more +8 moreOpenshift-api: openshift-controller-manager/build: build process in openshift allows overwriting of node pull credentialsCVE-2024-454977.6 High
- red hat service interconnect 1, service interconnect 1 for rhel 9 +1 moreSkupper: skupper-cli: flawed authentication method may lead to arbitrary file read or denial of serviceCVE-2024-125827.1 High
- red hat openshift container platform 4.18Ose-olm-catalogd-container: incomplete fix for rapid reset (cve-2023-39325/cve-2023-44487)CVE-2024-126986.5 Medium
- red hat build of keycloak, jboss enterprise application platform 8, jboss enterprise application platform expansion pack +2 moreKeycloak: cli option for encrypted jgroups ignoredCVE-2024-10973Fix available5.7 Medium
- red hat advanced cluster management for kubernetes 2Open-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokensCVE-2024-9779Fix available7.5 High
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +12 more +14 moreDpdk: denial of service from malicious guest on hypervisors using dpdk vhost libraryCVE-2024-11614Fix available7.4 High
- red hat cryostat 3, cryostat 4 on rhel 9, hawtio hawtio 4.2.0 +12 more +14 moreIo.quarkus.http/quarkus-http-core: quarkus http cookie smugglingCVE-2024-12397Fix available7.4 High
- red hat build of keycloak, jboss enterprise application platform 7, jboss enterprise application platform 8 +1 more +3 moreElytron-oidc-client: oidc authorization code injectionCVE-2024-12369Fix available4.2 Medium
- red hat enterprise linux 8, enterprise linux 9, openshift container platform 3.11 +5 more +7 moreCri-o: checkpoint restore can be triggered from different namespacesCVE-2024-8676Fix available7.4 High
- red hat fast datapath for red hat enterprise linux 7, fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9 +14 more +16 moreTuned: improper sanitization of `instance_name` parameter of the `instance_create()` methodCVE-2024-52337Fix available5.5 Medium
- red hat fast datapath for red hat enterprise linux 8, fast datapath for red hat enterprise linux 9, fast datapath for rhel 7 +5 more +7 moreTuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by rootCVE-2024-52336Fix available7.8 High
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreKeycloak-quarkus-server: keycloak path trasversalCVE-2024-10492Fix available2.7 Low
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +3 more +5 moreOrg.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build processCVE-2024-10451Fix available5.9 Medium
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +4 more +6 moreOrg.keycloak:keycloak-services: keycloak denial of serviceCVE-2024-10270Fix available6.5 Medium
- red hat build of keycloak, build of keycloak 24, build of keycloak 24.0.9 +3 more +5 moreOrg.keycloak/keycloak-quarkus-server: keycloak proxy header handling denial-of-service (dos) vulnerabilityCVE-2024-9666Fix available4.7 Medium
- red hat openshift container platform 4.14, openshift container platform 4.15, openshift container platform 4.16 +2 more +4 moreOpenshift-console: openshift console: server-side request forgeryCVE-2024-65385.3 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +1 moreAutomation-gateway: aap-gateway: improper scope handling in oauth2 tokens for aap 2.5CVE-2024-114835.0 Medium
- rustls project rustls, red hat trusted artifact signer +1 moreRustls: rustls network-reachable panic in `acceptor::accept`CVE-2024-11738Fix available5.3 Medium
- red hat cert-manager operator for red hat openshift, cryostat 3, multicluster engine for kubernetes +5 more +7 moreCert-manager: potential dos when parsing specially crafted pem inputsCVE-2024-12401Fix available4.4 Medium
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 moreAvahi: avahi wide-area dns predictable transaction idsCVE-2024-52616Fix available5.3 Medium
- avahi, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreAvahi: avahi wide-area dns uses constant source portCVE-2024-52615Fix available5.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: read request out-of-bounds read information disclosure vulnerabilityCVE-2023-39179Fix available7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: transform header out-of-bounds read information disclosure vulnerabilityCVE-2023-39176Fix available5.8 Medium
- red hat build of debezium, integration change data capture +1 moreDebezium: script injection via connector parameterCVE-2023-1419Fix available5.9 Medium
- red hat openshift container platform 4Oauth-server-container: oauth-server-container logs client secret in debug levelCVE-2024-112174.9 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +7 more +9 morePodman: build context bind mountCVE-2025-4953Fix available7.4 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerabilityCVE-2023-4458Fix available4.0 Medium
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info blockCVE-2024-49395Fix available5.3 Medium
- mutt, neomutt, red hat enterprise linux 7 +3 more +5 moreMutt: neomutt: in-reply-to email header field it not protected by cryptograpic signingCVE-2024-49394Fix available5.3 Medium
- mutt, neomutt, red hat enterprise linux 10 +4 more +6 moreMutt: neomutt: to and cc email header fields are not protected by cryptographic signingCVE-2024-49393Fix available6.5 Medium
- red hat ansible automation platform execution environments, ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +2 more +4 moreAnsible-core: unsafe tagging bypass via hostvars object in ansible-coreCVE-2024-11079Fix available5.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 morePam: improper hostname interpretation in pam_access leads to access control bypassCVE-2024-10963Fix available7.4 High
- hibernate hibernate-validator, red hat a-mq clients 2, cryostat 2 +29 more +31 moreHibernate-validator: rendering of invalid html with safehtml leads to html injection and xssCVE-2023-1932Fix available6.1 Medium
- red hat ansible automation platform execution environments, ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +4 more +6 moreAnsible-core: ansible-core user may read/write unauthorized contentCVE-2024-9902Public exploitFix available6.3 Medium
- Show moreLoading…