Skip to contentRedhat Enterprise Linux Server Update Services For Sap Solutions vulnerabilities
- clusterlabs booth, red hat enterprise linux 10, enterprise linux 7 +17 more +19 moreBooth: specially crafted hash can lead to invalid hmac being accepted by booth serverCVE-2024-3049Fix available5.9 Medium
- freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 moreIpa: invalid csrf protectionCVE-2023-5455Fix available6.5 Medium
- redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 moreInsights-client: unsafe handling of temporary files and directoriesCVE-2023-3972Fix available7.8 High
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 moreA vulnerability was found in X.Org. This issue occurs due to a dangling pointer in...CVE-2023-0494Fix available7.8 High
- fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 moresssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersCVE-2022-4254Fix available8.8 High
- fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 moreA buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead...CVE-2022-2601Fix available8.6 High
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceCVE-2022-24809Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereferenceCVE-2022-24808Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory accessCVE-2022-24807Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneouslyCVE-2022-24806Fix available6.5 Medium
- net-snmp, debian linux, fedoraproject fedora +12 more +14 morenet-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.CVE-2022-24805Fix available6.5 Medium
- podman project podman, fedoraproject fedora, psgo project psgo +13 more +15 morePodman publishes a malicious image to public registriesCVE-2022-1227Public exploitFix available8.8 High
- containers podman, fedoraproject fedora, redhat developer tools +11 more +13 morePodman's default inheritable capabilities for linux container not emptyCVE-2022-27649Fix available7.5 High
- debian linux, linux kernel, fedoraproject fedora +27 more +29 moreA flaw use after free in the Linux kernel FUSE filesystem was found in the way user triggers...CVE-2022-1011Public exploitFix available7.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0847In KEVPublic exploitFix availableEPSS 92.8%7.8 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in...CVE-2022-0516Fix available7.8 High
- linux kernel, ovirt node, fedoraproject fedora +27 more +29 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0435Public exploitFix availableEPSS 67.8%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0492In KEVPublic exploitFix available7.8 High
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0330Fix available7.8 High
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...CVE-2021-4034In KEVPublic exploitFix availableEPSS 94.9%7.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3744Fix available5.5 Medium
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- kernel kvm, linux kernel, fedoraproject fedora +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3656Public exploitFix available8.8 High
- c-ares, fedoraproject fedora, nodejs node.js +14 more +16 moreA flaw was found in c-ares library, where a missing input validation check of host names returned...CVE-2021-3672Fix available5.6 Medium
- linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker...CVE-2021-3609Fix available7.0 High
- dogtagpki, fedoraproject fedora, oracle linux +9 more +11 moreA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores...CVE-2021-3551Fix available7.8 High
- redhat libvirt, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 moreAn information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP...CVE-2020-143016.5 Medium
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- redhat codeready linux builder, codeready linux builder eus, codeready linux builder for arm64 eus +20 more +22 moreA vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted...CVE-2019-8720In KEVFix available8.8 High
- systemd project systemd, fedoraproject fedora, redhat enterprise linux +11 more +13 moreIn systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by...CVE-2019-15718Fix available4.4 Medium
- systemd project systemd, canonical ubuntu linux, debian linux +19 more +21 moreAn issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus...CVE-2019-6454Fix available5.5 Medium
- systemd, canonical ubuntu linux, debian linux +18 more +20 moreAn out of bounds read was discovered in systemd-journald in the way it parses log messages that...CVE-2018-16866Fix available4.3 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA use-after-free vulnerability was found in network namespaces code affecting the Linux kernel...CVE-2017-15129Fix available4.7 Medium
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 moreWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the serverCVE-2017-12615In KEVPublic exploitFix availableEPSS 99.7%8.1 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium