Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows...CVE-2015-4757Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4752Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2648Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2643Fix available4.0 Medium
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2582Fix available4.0 Medium
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...CVE-2015-5123In KEVFix availableEPSS 18.8%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...CVE-2015-5122In KEVPublic exploitFix availableEPSS 87.0%9.8 Critical
- redhat jboss fuseRed Hat JBoss Fuse before 6.2.0 allows remote authenticated users to bypass intended restrictions...CVE-2014-81756.0 Medium
- adobe flash player, opensuse evergreen, opensuse +8 more +10 moreUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in...CVE-2015-5119In KEVPublic exploitFix availableEPSS 98.6%9.8 Critical
- linux kernel, redhat enterprise linux server aus +1 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide...CVE-2015-5366Fix available5.0 Medium
- haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 Medium
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not...CVE-2015-5364Fix available7.8 High
- ruby-lang ruby, rubygems, oracle solaris +1 more +3 moreRubyGems vulnerable to DNS hijack attackCVE-2015-3900Fix available5.0 Medium
- netcf project netcf, fedoraproject fedora, redhat enterprise linux +2 moreThe find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of...CVE-2014-8119Fix available7.5 High
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5...CVE-2015-46057.5 High
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4...CVE-2015-46047.5 High
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5...CVE-2015-4147Fix availableEPSS 12.2%7.5 High
- redhat thermostatThermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which...CVE-2015-3201Fix available2.1 Low
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24,...CVE-2015-33077.5 High
- w1.fi hostapd, opensuse, redhat enterprise linux desktop +4 more +6 moreInteger underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant...CVE-2015-4142Fix available4.3 Medium
- nokogiri, redhat cloudforms management engine, enterprise mrg +5 more +7 moreNokogiri is vulnerable to XML External Entity (XXE) attackCVE-2012-6685Fix available7.5 High
- redhat kexec-toolsThe Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0...CVE-2015-0267Fix available3.6 Low
- php, apple mac os x, redhat enterprise linux +6 more +8 morePHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...CVE-2015-4025Fix availableEPSS 17.0%7.5 High
- fedora pacemaker configuration system, redhat enterprise linux high availability, enterprise linux high availability eus +2 more +4 moreThe pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an...CVE-2015-18486.8 Medium
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http ClientCVE-2013-7398Fix available4.3 Medium
- async-http-client project async-http-client, redhat jboss fuse +1 moreInsufficient Verification of Data Authenticity in Async Http ClientCVE-2013-7397Fix available4.3 Medium
- pypa pip, debian linux, fedoraproject fedora +3 more +5 moreImproper Authentication in pipCVE-2013-5123Public exploitFix available5.9 Medium
- snoopy, debian linux, redhat openstack +2 moreSnoopy allows remote attackers to execute arbitrary commands.CVE-2014-5008Fix available9.8 Critical
- snoopy, nagios, redhat openstack +2 moreThe _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE...CVE-2008-7313Fix available9.8 Critical
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the...CVE-2015-02572.1 Low
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny...CVE-2015-02376.8 Medium
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to...CVE-2015-1250Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreUse-after-free vulnerability in the MutationObserver::disconnect function in core/dom...CVE-2015-1243Fix available7.5 High
- apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 moreThe HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4...CVE-2015-1774Fix available6.8 Medium
- redhat jboss operations networkRed Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which...CVE-2015-02979.0 High
- redhat drools, jbpm +1 moreImproper Input Validation in Drools and jBPMCVE-2014-8125Fix available7.5 High
- redhat jboss enterprise application platformThe default configuration for the Command Line Interface in Red Hat Enterprise Application...CVE-2014-35862.1 Low
- canonical ubuntu linux, debian linux, opensuse +7 more +9 moreHeap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...CVE-2015-1863Fix available5.8 Medium
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreGoogle Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation...CVE-2015-1241Fix available4.3 Medium
- debian linux, gstreamer, mozilla firefox +11 more +13 moreGStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and...CVE-2015-0797Fix available6.8 Medium
- redhat openstackThe puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a...CVE-2015-1842Fix available10.0 High
- redhat dockerThe Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls back to...CVE-2015-1843Fix available4.3 Medium
- gnu mailman, canonical ubuntu linux, debian linux +1 more +3 moreDirectory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias,...CVE-2015-2775Fix available7.6 High
- redhat slapi-nisThe slapi-nis plug-in before 0.54.2 does not properly reallocate memory when processing user...CVE-2015-0283Fix available7.8 High
- redhat richfacesJBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL)...CVE-2015-0279Known exploited6.8 Medium
- php, apple mac os x, oracle linux +8 more +10 moreThe php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before...CVE-2015-3330Fix availableEPSS 13.5%6.8 Medium
- php, apple mac os x, opensuse +6 more +8 moreThe move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5...CVE-2015-2348Fix available5.0 Medium
- Show moreLoading…