Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- apache batik, canonical ubuntu linux, redhat jboss enterprise brms platform +2 moreImproper Input Validation in Apache BatikCVE-2015-0250Fix availableEPSS 16.6%6.4 Medium
- redhat openstackThe log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard...CVE-2015-0271Fix available4.0 Medium
- theforeman foreman, redhat openstack +1 moreSmart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2...CVE-2014-3691Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to...CVE-2015-1231Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in...CVE-2015-1230Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 morenet/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a...CVE-2015-1229Fix available5.0 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used...CVE-2015-1228Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreUse-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders...CVE-2015-1220Fix available6.8 Medium
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in...CVE-2015-1219Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google...CVE-2015-1218Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener...CVE-2015-1217Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreUse-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core...CVE-2015-1216Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreThe filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote...CVE-2015-1215Fix available7.5 High
- google chrome, canonical ubuntu linux, redhat enterprise linux desktop supplementary +3 more +5 moreInteger overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters...CVE-2015-1214Fix available7.5 High
- automount project automount, opensuse, redhat enterprise linux desktop +3 more +5 moreautomount 5.0.8, when a program map uses certain interpreted languages, uses the calling user's...CVE-2014-8169Fix available4.4 Medium
- redhat kie workbenchThe default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to...CVE-2014-81156.5 Medium
- redhat uberfireUberFire Framework Improperly Restricts PathsCVE-2014-81146.8 Medium
- redhat jbpm-designerXML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2...CVE-2014-36827.5 High
- redhat jboss enterprise application platform, jboss enterprise brms platform +1 morePicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and...CVE-2014-00053.6 Low
- elastic elasticsearch, redhat fuse +1 moreImproper Access Control in ElasticsearchCVE-2015-1427In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- redhat jboss weldInformation disclosure in JBoss WeldCVE-2014-8122Fix available4.3 Medium
- redhat jboss enterprise application platform, jboss operations network +1 moreThe JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application...CVE-2014-78534.0 Medium
- redhat jboss enterprise application platformThe Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP...CVE-2014-78494.0 Medium
- redhat jboss enterprise application platformThe org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in...CVE-2014-78273.5 Low
- redhat ovirt-engineCross-site request forgery (CSRF) vulnerability in oVirt Engine before 3.5.0 beta2 allows remote...CVE-2014-01516.8 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 morebdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial...CVE-2014-9675Fix available5.0 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with...CVE-2014-9674Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +7 more +9 moreInteger signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType...CVE-2014-9673Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 moreOff-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4...CVE-2014-9671Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType...CVE-2014-9670Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to...CVE-2014-9669Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 moresfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without...CVE-2014-9667Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreFreeType before 2.5.4 does not check for the end of the data during certain parsing actions,...CVE-2014-9664Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain...CVE-2014-9663Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moretype42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete...CVE-2014-9661Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle...CVE-2014-9660Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect...CVE-2014-9658Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish...CVE-2014-9657Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and...CVE-2015-1212Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe OriginCanAccessServiceWorkers function in content/browser/service_worker...CVE-2015-1211Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the...CVE-2015-1210Fix available5.0 Medium
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreUse-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in...CVE-2015-1209Fix available7.5 High
- debian linux, ntp, redhat enterprise linux desktop +2 more +4 moreThe read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X...CVE-2014-9751Fix available6.8 Medium
- ntp, debian linux, redhat enterprise linux desktop +2 more +4 morentp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows...CVE-2014-9750Fix available5.8 Medium
- redhat libvirt, canonical ubuntu linux, mageia +4 more +6 morelibvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the...CVE-2015-0236Fix available3.5 Low
- redhat openstack, openstack image registry and delivery service \(glance\) +1 moreOpenStack Glance Bypass the storage quota and Denial of serviceCVE-2014-9623Fix available4.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreThe em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the...CVE-2015-0239Fix available4.4 Medium
- google chrome, chromium, opensuse +4 more +6 moreThe SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI...CVE-2014-7941Fix available5.0 Medium
- google chrome, chromium, opensuse +4 more +6 moreGoogle Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote...CVE-2014-7939Fix available4.3 Medium
- Show moreLoading…