Skip to contentRedhat Virtualization vulnerabilities
- redhat xnio, oracle communications cloud native core console, communications cloud native core network repository function +11 more +13 moreUncontrolled Resource Consumption in XNIOCVE-2020-14340Fix available5.9 Medium
- linux kernel, fedoraproject fedora, netapp cloud backup +16 more +18 moreA flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the...CVE-2021-3501Fix available7.1 High
- microsoft nbdkit, redhat enterprise linux, enterprise linux server +1 more +3 moreA denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker...CVE-2019-14850Fix available3.7 Low
- openvswitch, fedoraproject fedora, lldpd project lldpd +14 more +16 moreA flaw was found in multiple versions of OpenvSwitch. Specially crafted LLDP packets can cause...CVE-2020-27827Fix available7.5 High
- m2crypto project m2crypto, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in all released versions of m2crypto, where they are vulnerable to...CVE-2020-25657Fix available5.9 Medium
- ovirt ovirt-engine, redhat virtualization +1 moreA flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other...CVE-2020-35497Fix available6.5 Medium
- kubevirt, redhat openshift virtualization +1 morePrivilege Escalation in kubevirtCVE-2020-14316Fix available9.9 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreCVE-2020-10711 does not affect BellSoft softwareCVE-2020-10711Fix available5.9 Medium
- ovirt ovirt-engine, redhat virtualization +1 moreA cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization...CVE-2019-19336Fix available5.4 Medium
- redhat enterprise virtualization hypervisor (aka rhev-h), enterprise virtualization, enterprise virtualization hypervisor +2 moreVDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2...CVE-2015-5201Fix available7.5 High
- python pyxml, redhat enterprise linux, enterprise virtualization hypervisor +2 morePyXML: Hash table collisions CPU usage Denial of ServiceCVE-2012-08777.5 High
- ovirt, redhat ovirt-engine, virtualization +2 moreoVirt users with MANIPULATE_STORAGE_DOMAIN permissions can attach a storage domain to any data...CVE-2015-17806.5 Medium
- redhat vdsclient, vdsm and vdsclient and vdsclient, redhat enterprise virtualization +1 more +3 morevdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate...CVE-2014-81675.9 Medium
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +3 more +5 moreA flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before...CVE-2019-14818Fix available7.5 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...CVE-2019-11135Fix available6.5 Medium
- redhat enterprise virtualization managerIn RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client...CVE-2009-35523.1 Low
- [unknown] vdsm, redhat enterprise virtualization, storage +1 more +3 moreInsecure temporary file vulnerability in RedHat vsdm 4.9.6.CVE-2013-42805.5 Medium
- manageiq evm evm, red hat cloudforms 3.0, redhat cloudforms +1 more +3 moreMultiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to...CVE-2013-01866.1 Medium
- python-ecdsa project python-ecdsa, redhat ceph storage, openstack +1 more +3 moreImproper Verification of Cryptographic Signature in Pure-Python ECDSACVE-2019-14859Fix available7.4 High
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...CVE-2019-14287Public exploitFix availableEPSS 63.8%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +25 more +27 moreAn out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way...CVE-2019-14821Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +31 more +33 moreA buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's...CVE-2019-14835Fix available7.2 High
- debian linux, linux kernel, canonical ubuntu linux +36 more +38 moreThere is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell...CVE-2019-14816Fix available5.5 Medium
- bluetooth br/edr, apple iphone os, mac os x +145 more +147 moreBlutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiationCVE-2019-9506Public exploitFix available7.6 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1703 +36 more +38 moreWindows Kernel Information Disclosure VulnerabilityCVE-2019-1125Public exploitFix available5.6 Medium
- ovirt, red hat ovirt-engine-metrics, redhat virtualization manager +2 moreSensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were...CVE-2019-10194Fix available5.9 Medium
- lodash, f5 big-ip access policy manager, big-ip advanced firewall manager +18 more +20 morePrototype Pollution in lodashCVE-2019-10744Public exploitFix available9.1 Critical
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreThe virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x...CVE-2019-10168Fix available8.8 High
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreThe virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before...CVE-2019-10167Fix available8.8 High
- libvirt, redhat enterprise linux, enterprise linux desktop +6 more +8 moreIt was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would...CVE-2019-10166Fix available7.8 High
- libvirt, canonical ubuntu linux, redhat enterprise linux +2 more +4 moreIt was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients...CVE-2019-10161Fix available8.8 High
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 moreJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...CVE-2019-11479Fix availableEPSS 91.3%5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreA flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies...CVE-2019-10126Fix available5.9 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreCredential exposure through log files in UndertowCVE-2019-3888Fix available5.3 Medium
- python, canonical ubuntu linux, debian linux +14 more +16 moreA security regression of CVE-2019-9636 was discovered in python since commit...CVE-2019-10160Fix available9.8 Critical
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- [unknown] cockpit, fedoraproject fedora, redhat virtualization +2 moreIt was found that cockpit before version 184 used glib's base64 decode functionality incorrectly...CVE-2019-3804Fix available7.5 High
- ovirt, redhat virtualization, unspecified ovirt-engine +2 moreIt was discovered that in the ovirt's REST API before version 4.3.2.1, RemoveDiskCommand is...CVE-2019-3879Fix available6.5 Medium
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- getbootstrap bootstrap, f5 big-ip access policy manager, big-ip advanced firewall manager +13 more +15 moreBootstrap Vulnerable to Cross-Site ScriptingCVE-2019-8331Public exploitFix availableEPSS 16.4%6.1 Medium
- rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 moreA denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...CVE-2018-16881Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux...CVE-2019-3460Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for...CVE-2018-18397Fix available5.5 Medium
- [unknown] glusterfs, debian linux, redhat enterprise linux server +2 more +4 moreA flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated...CVE-2018-14660Fix available6.5 Medium
- gluster glusterfs, debian linux, redhat enterprise linux server +3 more +5 moreIt was found that usage of snprintf function in feature/locks translator of glusterfs server 3.8...CVE-2018-14661Fix available6.5 Medium
- redhat gluster file system, debian linux, redhat enterprise linux server +3 more +5 moreThe Gluster file system through versions 4.1.4 and 3.1.2 is vulnerable to a denial of service...CVE-2018-14659Fix available6.5 Medium
- debian linux, redhat enterprise linux server, enterprise linux virtualization +4 more +6 moreThe Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index'...CVE-2018-14654Fix available5.4 Medium
- debian linux, redhat enterprise linux server, enterprise linux virtualization +2 more +4 moreThe Gluster file system through versions 4.1.4 and 3.12 is vulnerable to a heap-based buffer...CVE-2018-14653Fix available6.5 Medium
- debian linux, redhat enterprise linux server, enterprise linux virtualization +3 more +5 moreThe Gluster file system through versions 3.12 and 4.1.4 is vulnerable to a buffer overflow in the...CVE-2018-14652Fix available6.5 Medium
- Show moreLoading…