Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0354Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0353Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0352Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0351Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0350Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0349Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreBuffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169...CVE-2015-0348Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0347Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreDouble free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17...CVE-2015-0346Fix availableEPSS 10.4%10.0 High
- qemu, redhat enterprise linux desktop, enterprise linux eus +4 more +6 moreThe host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration,...CVE-2014-7840Fix available7.5 High
- gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...CVE-2014-8564Fix available5.0 Medium
- redhat openshiftRed Hat OpenShift Enterprise before 2.2 does not properly restrict access to gears, which allows...CVE-2014-36747.5 High
- redhat openshiftRed Hat OpenShift Enterprise before 2.2 allows local users to obtain IP address and port number...CVE-2014-36022.1 Low
- redhat libvirtThe virDomainGetXMLDesc API in Libvirt before 1.2.11 allows remote read-only users to obtain the...CVE-2014-7823Fix available5.0 Medium
- libreoffice, canonical ubuntu linux, opensuse +3 more +5 moreUse-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4...CVE-2014-3693Fix available7.5 High
- redhat satellite, spacewalk-java, satellite with embedded oracle +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red...CVE-2014-3654Fix available4.3 Medium
- openstack nova, redhat openstack +1 moreOpenStack Nova VMware instance leak potentially leading to compute DoSCVE-2014-8333Fix available4.0 Medium
- openstack nova, redhat openstack +1 moreOpenStack Compute (Nova) Denial of Service vulnerabilityCVE-2014-3708Fix available4.0 Medium
- zend framework, fedoraproject fedora, redhat enterprise linux +2 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-8089Fix available9.8 Critical
- ruby-lang ruby, canonical ubuntu linux, opensuse +1 more +3 moreThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...CVE-2014-8080Fix available5.0 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...CVE-2014-0148Fix available5.5 Medium
- php, redhat enterprise linux +1 moreThe php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before...CVE-2015-4644Fix available7.5 High
- php, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before...CVE-2015-4643Fix availableEPSS 15.4%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x...CVE-2015-4603Fix availableEPSS 10.6%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...CVE-2015-4602Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 morePHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...CVE-2015-4601Fix available9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...CVE-2015-4600Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...CVE-2015-4599Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...CVE-2015-4598Fix available6.5 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...CVE-2015-4148Public exploitFix availableEPSS 19.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...CVE-2015-4026Fix availableEPSS 18.8%7.5 High
- php, apple mac os x, hp system management homepage +9 more +11 moreAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...CVE-2015-4024Fix availableEPSS 41.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...CVE-2015-4022Fix availableEPSS 20.1%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...CVE-2015-4021Fix availableEPSS 20.5%5.0 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3412Fix available5.3 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3411Fix available6.5 Medium
- php, apple mac os x, oracle linux +8 more +10 moreMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...CVE-2015-3329Fix availableEPSS 38.2%7.5 High
- php, apple mac os x, opensuse +6 more +8 moreUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-2787Fix availableEPSS 11.8%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...CVE-2015-2783Fix available5.8 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- redhat cloudforms 3.0 management engineThe (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management...CVE-2014-0136Fix available5.0 Medium
- igniterealtime smack api, redhat jboss fuse +1 moreThe Ignite Realtime Smack XMPP API 4.x before 4.0.2, and 3.x and 2.x when a custom SSLContext is...CVE-2014-50756.8 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0412Fix available7.2 High
- oracle jrockit, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5...CVE-2015-0410Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0408Fix available10.0 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +3 more +5 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0407Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise server +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0395Fix available9.3 High
- oracle jrockit, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71...CVE-2015-0383Fix available5.4 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2014-6601Fix available10.0 High
- Show moreLoading…