Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- redhat enterprise linux, enterprise mrg, kernel-rt +3 more +5 moreThe Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when...CVE-2015-7837Fix available5.5 Medium
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to...CVE-2015-5261Fix available7.1 High
- redhat openshiftrubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to...CVE-2015-5274Fix available6.5 Medium
- redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of...CVE-2015-5235Fix available4.3 Medium
- redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which...CVE-2015-5234Fix available6.8 Medium
- redhat openshift originDenial of Service in OpenShift OriginCVE-2015-5250Fix available4.0 Medium
- redhat enterprise virtualizationThe Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users...CVE-2015-18413.7 Low
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...CVE-2015-6815Fix available3.5 Low
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of...CVE-2015-5260Fix available7.8 High
- spice project spice, redhat enterprise linux, enterprise linux desktop +3 more +5 moreRace condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote...CVE-2015-3247Fix available6.9 Medium
- qemu, fedoraproject fedora, redhat openstack +2 moreBuffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU...CVE-2015-5225Fix available7.2 High
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +5 more +7 morentp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of...CVE-2015-5195Public exploitFix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- redhat openshiftRed Hat OpenShift Enterprise 3.0.0.0 does not properly check permissions, which allows remote...CVE-2015-5222Fix available8.5 High
- redhat mod clusterCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...CVE-2015-0298Fix available4.3 Medium
- clusterlabs pacemaker, redhat enterprise linux high availability, enterprise linux resilient storage +2 morePacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only...CVE-2015-1867Fix available7.5 High
- redhat jboss portalThe PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not...CVE-2015-51765.8 Medium
- redhat jboss operations networkCross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations...CVE-2015-32674.3 Medium
- redhat jboss bpm suiteXML external entity (XXE) vulnerability in the dashbuilder import facility (DocumentBuilders in...CVE-2015-18187.5 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- redhat ansibleAnsible does not verify that the server hostname matches a domain name in certificatesCVE-2015-3908Fix available4.3 Medium
- ibm java sdk, redhat enterprise linux desktop, enterprise linux eus +5 more +7 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...CVE-2015-19315.5 Medium
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux hpc node eus +4 more +6 moreThe Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local...CVE-2015-31495.5 Medium
- libuser project libuser, opensuse, redhat enterprise linux +2 morelibuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...CVE-2015-3246In KEVPublic exploitFix available7.2 High
- redhat libuserIncomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60...CVE-2015-3245Public exploitFix available2.1 Low
- linux kernel, redhat enterprise linux desktop, enterprise linux hpc node +3 more +5 morearch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET...CVE-2015-5157Fix available7.2 High
- google chrome, debian linux, opensuse +4 more +6 moreThe Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS...CVE-2015-1288Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreCross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function...CVE-2015-1286Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used...CVE-2015-1282Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreInteger overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium,...CVE-2015-1279Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 morecontent/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not...CVE-2015-1278Fix available4.3 Medium
- google chrome, debian linux, opensuse +3 more +5 moreGoogle Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous...CVE-2015-1274Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreHeap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome...CVE-2015-1273Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 morePDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of...CVE-2015-1271Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to...CVE-2015-1289Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreBlink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits...CVE-2015-1287Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreThe XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in...CVE-2015-1285Fix available5.0 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +2 more +4 moreThe LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google...CVE-2015-1284Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 morecore/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not...CVE-2015-1281Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreSkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote...CVE-2015-1280Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0...CVE-2015-1277Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the...CVE-2015-1276Fix available9.8 Critical
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403...CVE-2015-1272Fix available7.5 High
- google chrome, debian linux, opensuse +5 more +7 moreThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...CVE-2015-1270Fix available6.8 Medium
- mariadb, oracle mysql, debian linux +9 more +11 moreOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...CVE-2015-3152Public exploitFix available5.9 Medium
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated...CVE-2015-4756Fix available4.0 Medium
- redhat jboss enterprise portal platformThe Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with...CVE-2015-32444.9 Medium
- Show moreLoading…