Skip to contentRed Hat vulnerabilities
Products
Show 140 moreShow less
Newest
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreLibsoup: memory leak on soup_header_parse_quality_list() via soup-headers.cCVE-2025-46420Fix available6.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev segmentation fault in read_arcobjectCVE-2025-46400Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: transfig: fig2dev segmentation fault vulnerabilityCVE-2025-46399Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreXfig: fig2dev stack-overflow via read_objectsCVE-2025-46398Fix available5.5 Medium
- fig2dev project fig2dev, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreXfig: xfig: stack-overflow allows possible code execution via local input manipulationCVE-2025-46397Fix available7.8 High
- red hat enterprise linux 10, enterprise linux 9, enterprise linux 9.4 extended update support +2 more +4 moreMod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requestsCVE-2024-10306Fix available5.4 Medium
- @clerk fastify, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +1 more +3 morefastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type HeaderCVE-2026-33806Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable valueCVE-2025-32911Fix available9.0 Critical
- red hat discovery 2, enterprise linux 10, enterprise linux 6 +26 more +28 moreKrb5: kerberos rc4-hmac-md5 checksum vulnerability enabling message spoofing via md5 collisionsCVE-2025-3576Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: oob read on libsoup through function "soup_multipart_new_from_message" in soup-multipart.c leads to crash or exit of processCVE-2025-32914Fix available7.4 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference in client when server omits the "nonce" parameter in an unauthorized response with digest authenticationCVE-2025-32912Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer deference on libsoup via /auth/soup-auth-digest.c through "soup_auth_digest_authenticate" on client when server omits the "realm" parameter in an unauthorized response with di…CVE-2025-32910Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.cCVE-2025-32909Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: denial of service on libsoup through http/2 serverCVE-2025-32908Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: denial of service in server when client requests a large amount of overlapping ranges with range headerCVE-2025-32907Fix available5.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: out of bounds reads in soup_headers_parse_request()CVE-2025-32906Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +13 more +15 moreLibsoup: null pointer dereference in soup_message_headers_get_content_disposition when "filename" parameter is present, but has no value in content-disposition headerCVE-2025-32913Fix available7.5 High
- red hat directory server 11, directory server 12, enterprise linux 10 +7 more +9 moreRust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`CVE-2025-3416Fix available3.7 Low
- red hat directory server 11, directory server 12, enterprise linux 10 +8 more +10 moreCrossbeam-channel: crossbeam-channel vulnerable to double free on dropCVE-2025-4574Fix available6.5 Medium
- red hat jboss enterprise application platform 7, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +5 more +7 moreOrg.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code executionCVE-2025-22516.2 Medium
- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreGnuplot: segmentation fault via io_str_init_static_internal functionCVE-2025-3359Fix available6.2 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +22 more +24 moreGlibc: glib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid iso 8601 timestamp with g_date_time_new_from_iso8601().CVE-2025-3360Fix available3.7 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflows in sniff_feed_or_html() and skip_insignificant_space()CVE-2025-32053Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: heap buffer overflow in sniff_unknown()CVE-2025-32052Fix available6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreLibsoup: segmentation fault when parsing malformed data uriCVE-2025-32051Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreLibsoup: integer overflow in append_param_quotedCVE-2025-32050Fix available5.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 moreLibsoup: denial of service attack to websocket serverCVE-2025-32049Fix available7.5 High
- gnome yelp, debian linux, red hat enterprise linux 6 +33 more +35 moreYelp: arbitrary file readCVE-2025-3155Fix availableEPSS 13.1%7.4 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +32 more +34 moreLibsoup: heap buffer over-read in `skip_insignificant_space` when sniffing contentCVE-2025-2784Fix available7.0 High
- image-size, red hat gatekeeper 3, build of podman desktop +15 more +17 moreimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF ParserCVE-2025-71319Fix available8.7 High
- red hat openshift distributed tracing 3, openshift distributed tracing 3.5.3 +1 moreTempo-operator: tempo operator token exposition lead to read sensitive dataCVE-2025-2842Fix available4.3 Medium
- red hat openshift distributed tracing 3, openshift distributed tracing 3.5.3 +1 moreTempo-operator: serviceaccount token exposure leading to token and subject access reviews in openshift tempo operatorCVE-2025-2786Fix available4.3 Medium
- red hat openshift lightspeedOls: unauthenticated metrics flooding in openshift lightspeed service leading to resource exhaustionCVE-2025-25867.5 High
- red hat data grid 8, jboss data grid 7 +1 moreInfinispan: infinispan: rest compare api has buffer leakCVE-2024-68756.5 Medium
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +1 more +3 moreEvent-driven-ansible: exposure inventory passwords in plain text when starting a rulebook activation with verbosity set to debug in edaCVE-2025-2877Fix available6.5 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on x11_graphicsCVE-2025-31181Fix available6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on canvas_textCVE-2025-31180Fix available6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on xstrftimeCVE-2025-31179Fix available6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on getannotatestringCVE-2025-31178Fix available6.2 Medium
- gnuplot, red hat enterprise linux 6, enterprise linux 7 +1 more +3 moreGnuplot: gnuplot segmentation fault on plot3d_pointsCVE-2025-31176Fix available6.2 Medium
- red hat build of keycloak, build of keycloak 26.0, single sign-on 7 +2 moreOrg.keycloak/keycloak-services: jwt token cache exhaustion leading to denial of service (dos) in keycloakCVE-2025-25594.9 Medium
- red hat openshift container platform 3.11, openshift container platform 4 +1 moreOpenshift-console: openshift console: path traversalCVE-2024-76314.3 Medium
- red hat directory server 12, directory server 12.4 eus for rhel 9, enterprise linux 10 +5 more +7 more389-ds-base: null pointer dereference leads to denial of serviceCVE-2025-2487Fix available4.9 Medium
- red hat multicluster engine for kubernetes, advanced cluster management for kubernetes 2 +1 moreHive: exposure of vcenter credentials via clusterprovision in hive / mce / acmCVE-2025-22418.2 High
- red hat satellite 6, satellite server +1 moreForeman: disclosure of executed commands and outputs in foreman / red hat satelliteCVE-2025-21573.3 Low
- red hat devworkspace operator 0.33, discovery 1.14, enterprise linux 10 +26 more +28 moreLibexpat: expat: improper restriction of xml entity expansion depth in libexpatCVE-2024-8176Public exploitFix available7.5 High
- red hat build of apache camel 4.8 for quarkus 3.15, build of apache camel 4.8.5 for spring boot, build of apicurio registry 2 +8 more +10 moreSmallrye-fault-tolerance: smallrye fault toleranceCVE-2025-2240Fix available7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreRing: some aes functions may panic when overflow checking is enabled in ringCVE-2025-4432Fix available5.3 Medium
- red hat build of keycloak, data grid 8, fuse 7 +13 more +15 moreOrg.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cliCVE-2025-23368Fix available8.1 High
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9 +1 moreAap-gateway: aap-gateway privilege escalationCVE-2025-1801Fix available8.1 High
- Show moreLoading…