Skip to contentRedhat Satellite vulnerabilities
- oracle jrockit, oracle corporation java, debian linux +10 more +12 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-3533Fix available3.7 Low
- qos logback, redhat satellite, satellite capsule +2 moreQOS.ch Logback vulnerable to Deserialization of Untrusted DataCVE-2017-5929Fix available9.8 Critical
- canonical ubuntu linux, debian linux, littlecms little cms color engine +16 more +18 moreThe Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to...CVE-2016-10165Fix available7.1 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- redhat satelliteCross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote...CVE-2016-30806.1 Medium
- katello, redhat satellite +1 moreKatello SQL Injection vulnerabilitiesCVE-2016-3072Fix available8.8 High
- redhat satelliteCross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote...CVE-2016-30976.1 Medium
- redhat satelliteMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...CVE-2016-21046.1 Medium
- ibm java sdk, novell suse linux enterprise module for legacy software, suse linux enterprise server +10 more +12 moreThe com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16...CVE-2016-03768.1 High
- ibm java sdk, novell suse linux enterprise module for legacy software, suse linux enterprise server +10 more +12 moreThe com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16...CVE-2016-03638.1 High
- ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 moreBuffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before...CVE-2016-02645.6 Medium
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- redhat satellite, spacewalk-java +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat...CVE-2016-30796.1 Medium
- redhat satelliteMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...CVE-2016-21036.1 Medium
- redhat satellite, spacewalk-java +1 moreCross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7...CVE-2015-02845.4 Medium
- theforeman foreman, redhat satellite +1 moreForeman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which...CVE-2015-5233Fix available4.2 Medium
- ibm java sdk, websphere application server, redhat satellite +2 more +4 moreThe J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...CVE-2015-50419.1 Critical
- ibm java 2 sdk, java sdk, redhat enterprise linux desktop +6 more +8 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3...CVE-2015-50062.1 Low
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- ibm java sdk, redhat enterprise linux desktop, enterprise linux eus +5 more +7 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...CVE-2015-19315.5 Medium
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- nokogiri, redhat cloudforms management engine, enterprise mrg +5 more +7 moreNokogiri is vulnerable to XML External Entity (XXE) attackCVE-2012-6685Fix available7.5 High
- redhat satellite, spacewalk-java, satellite with embedded oracle +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red...CVE-2014-3654Fix available4.3 Medium
- redhat network satellite, suse manager +1 moreXML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5...CVE-2014-8162Fix available7.5 High
- redhat satellite, spacewalk, suse manager +2 moreCross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before...CVE-2014-78123.5 Low
- redhat spacewalk, network satellite, suse manager +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...CVE-2014-78113.5 Low
- redhat satellite, spacewalk-java, satellite with embedded oracle +2 more +4 moreCross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk...CVE-2014-3595Fix available4.3 Medium
- theforeman katello, redhat network satellite +1 moreThe users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check...CVE-2013-2143Public exploitEPSS 48.2%6.5 Medium
- redhat satellite, spacewalk-java, network proxy +2 moreThe monitoring probe display in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)...CVE-2010-22366.0 Medium
- redhat satellite, spacewalk-java +1 moreCRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)...CVE-2013-18694.3 Medium
- redhat satellite, satellite 5 managed db, spacewalk-java +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...CVE-2013-44154.3 Medium
- redhat satelliteCross-site scripting (XSS) vulnerability in account/EditAddress.do in Spacewalk and Red Hat...CVE-2013-18713.5 Low
- redhat satellite, satellite 5 managed db, spacewalk-java +2 moreMultiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red...CVE-2012-61493.5 Low
- red hat enterprise linux 6, enterprise linux 7, network proxy v 5.4 +3 more +5 moreSpacewalk-backend: spacewalk-backend: information disclosure via cleartext passwords in error messagesCVE-2012-0059Fix available4.9 Medium
- redhat spacewalk, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting via uri in lookup login/password formCVE-2011-33445.4 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk and red hat network satellite: cross-site scripting vulnerability via search formsCVE-2011-29275.4 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: cross-site scripting vulnerability allows arbitrary web script execution.CVE-2011-29205.5 Medium
- redhat spacewalk, network satellite +1 moreCross-site scripting (XSS) vulnerability in Spacewalk 1.6, as used in Red Hat Network (RHN)...CVE-2011-29194.3 Medium
- redhat network satellite, spacewalk, red hat enterprise linux 6 +2 more +4 moreSpacewalk: spacewalk: open redirect vulnerability enables phishing attacks via url parameterCVE-2011-15946.5 Medium
- redhat satellite, network satellite, satellite with embedded oracle +2 more +4 moreRed Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the...CVE-2013-4480Fix available7.5 High
- canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...CVE-2015-2808Fix availableEPSS 73.9%5.0 Medium
- redhat satellite, red hat network satellite server v 5.3, network satellite server v 5.4 +2 more +4 moreRed hat network satellite: red hat network satellite: information disclosure via inter-satellite sync (iss) authentication bypassCVE-2013-2056Fix available7.5 High
- oracle jre, jdk, redhat enterprise linux desktop +14 more +16 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17172.1 Low
- redhat satellitespacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not...CVE-2012-1145Fix available5.0 Medium
- redhat satellite, red hat network satellite server v 5.4, satellite 6 +2 moreSatellite: xss in custom system information key handlingCVE-2011-4346Fix available4.6 Medium
- oracle java se jdk and jre, jdk, jre +4 more +6 moreUnspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE...CVE-2011-3544In KEVPublic exploitEPSS 96.7%9.8 Critical
- Show moreLoading…