Redhat Virtualization Manager vulnerabilities

• red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 more Ansible discloses sensitive information in traceback error message CVE-2021-3620 Fix available 5.5 MediumOctober 23, 2021
• canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 more TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an... CVE-2019-11135 Fix available 6.5 MediumNovember 12, 2019
• redhat enterprise virtualization manager In RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client... CVE-2009-3552 3.1 LowNovember 9, 2019
• manageiq evm evm, red hat cloudforms 3.0, redhat cloudforms +1 more +3 more Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to... CVE-2013-0186 6.1 MediumNovember 1, 2019
• ovirt, red hat ovirt-engine-metrics, redhat virtualization manager +2 more Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were... CVE-2019-10194 Fix available 5.9 MediumJuly 11, 2019
• lodash, f5 big-ip access policy manager, big-ip advanced firewall manager +18 more +20 more Prototype Pollution in lodash CVE-2019-10744 Public exploitFix available 9.1 CriticalJuly 10, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• getbootstrap bootstrap, f5 big-ip access policy manager, big-ip advanced firewall manager +13 more +15 more Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019
• rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 more A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could... CVE-2018-16881 Fix available 5.3 MediumJanuary 25, 2019
• qemu, canonical ubuntu linux, debian linux +3 more +5 more qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which... CVE-2018-17963 Fix available 9.8 CriticalOctober 9, 2018
• qemu, canonical ubuntu linux, debian linux +2 more +4 more Qemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer... CVE-2018-17958 Fix available 7.5 HighOctober 9, 2018
• ovirt, [unknown] ovirt-engine-setup, redhat enterprise virtualization manager +2 more ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log... CVE-2018-1072 5.0 MediumJune 26, 2018
• debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 more linux-4.9 - security update CVE-2018-3639 Public exploitFix available EPSS 60.2% 5.5 MediumMay 21, 2018
• debian linux, freebsd, xen +8 more +10 more A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software... CVE-2018-8897 Public exploitFix available EPSS 18.5% 7.8 HighMay 8, 2018
• redhat manageiq enterprise virtualization manager Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager ... CVE-2013-0185 8.8 HighMay 1, 2018
• [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 more The DPDK vhost-user interface does not check to verify that all the requested guest physical... CVE-2018-1059 Fix available 6.1 MediumApril 24, 2018
• redhat enterprise virtualization manager redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before... CVE-2015-7544 Fix available 9.1 CriticalSeptember 25, 2017
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to... CVE-2015-5293 5.9 MediumAugust 24, 2017
• [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 more Ansible fails to properly mark lookup-plugin results as unsafe CVE-2017-7481 Fix available 5.3 MediumJune 10, 2017
• debian linux, openvswitch, redhat openstack +2 more +4 more In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,... CVE-2017-9214 Fix available 9.8 CriticalMay 23, 2017
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the... CVE-2015-0257 2.1 LowMay 1, 2015
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny... CVE-2015-0237 6.8 MediumMay 1, 2015
• redhat enterprise virtualization manager The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4... CVE-2014-3573 Fix available 6.5 MediumOctober 18, 2014
• redhat enterprise virtualization manager The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a... CVE-2013-6434 Fix available 4.3 MediumJanuary 24, 2014
• redhat manageiq enterprise virtualization manager, cloudforms management engine +1 more SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management... CVE-2013-2050 EPSS 15.7% 7.5 HighJanuary 11, 2014
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions... CVE-2013-2144 Fix available 5.0 MediumJuly 3, 2013
• redhat enterprise virtualization manager The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does... CVE-2013-0168 4.0 MediumMarch 12, 2013
• redhat enterprise virtualization manager The domain management tool (rhevm-manage-domains) in Red Hat Enterprise Virtualization Manager ... CVE-2012-6115 2.1 LowMarch 12, 2013
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage... CVE-2012-5516 2.1 LowJanuary 4, 2013
• redhat enterprise virtualization manager The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly... CVE-2012-2696 2.7 LowJanuary 4, 2013
• redhat enterprise virtualization manager The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a... CVE-2012-0861 Fix available 6.8 MediumJanuary 4, 2013
• redhat enterprise virtualization manager Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV... CVE-2012-0860 6.2 MediumJanuary 4, 2013
• redhat enterprise virtualization manager Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions,... CVE-2011-4316 3.7 LowJanuary 4, 2013
• redhat spice-activex, enterprise virtualization manager +1 more Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat... CVE-2010-2793 6.8 MediumDecember 8, 2010
• redhat enterprise virtualization manager The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M)... CVE-2010-2224 2.1 LowJune 24, 2010