Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- jenkins, redhat openshift +1 moreJenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLICVE-2015-5319Fix available5.0 Medium
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-5318Fix available6.8 Medium
- jenkins, jenkins user interface (ui), redhat openshift +2 moreJenkins discloses project names via fingerprintsCVE-2015-5317In KEVFix availableEPSS 23.0%5.0 Medium
- redhat gluster storageOpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python...CVE-2015-5242Fix available6.0 Medium
- redhat enterprise linuxThe grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI...CVE-2015-5281Fix available2.6 Low
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 Medium
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- redhat openshiftDirectory Traversal in KubernetesCVE-2015-5305Fix available6.4 Medium
- redhat jboss enterprise application platform, jboss wildfly application server +1 moreThe Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly ...CVE-2015-52205.0 Medium
- redhat jboss enterprise application platform, jboss wildfly application server +1 moreCross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat...CVE-2015-51886.8 Medium
- redhat jboss enterprise application platform, jboss wildfly application server +1 moreThe Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly ...CVE-2015-51784.3 Medium
- libpng, canonical ubuntu linux, debian linux +7 more +9 moreThe png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,...CVE-2015-7981Fix available5.0 Medium
- ntp, debian linux, netapp clustered data ontap +10 more +12 morentpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a...CVE-2015-7852Fix availableEPSS 12.3%5.9 Medium
- ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77...CVE-2015-7703Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7702Fix available6.5 Medium
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreMemory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4...CVE-2015-7701Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7692Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7691Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4913Fix available3.5 Low
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated...CVE-2015-4910Fix available2.1 Low
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated...CVE-2015-4890Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4879Fix available4.6 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4870Public exploitFix availableEPSS 30.1%4.0 Medium
- oracle mysql, canonical ubuntu linux, mariadb +7 more +9 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4864Fix available3.5 Low
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated...CVE-2015-4862Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4861Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4858Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4836Fix available2.8 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4826Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4819Fix available7.2 High
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated...CVE-2015-4816Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4815Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4802Fix available4.0 Medium
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated...CVE-2015-4800Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4792Fix available1.7 Low
- redhat enterprise linux, novell suse linux enterprise real time extension +1 moreThe usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7...CVE-2015-7833Fix available4.9 Medium
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated UsersCVE-2015-1814Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins allows Cross-Site Scripting (XSS)CVE-2015-1813Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Cross-site Scripting vulnerabilityCVE-2015-1812Fix available4.3 Medium
- jenkins, redhat openshift +1 moreJenkins does not Restrict Reserved Names Allowing for Privilege EscalationCVE-2015-1810Fix available4.6 Medium
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Denial of Service (DoS)CVE-2015-1808Fix available3.5 Low
- jenkins, redhat openshift +1 moreDirectory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote...CVE-2015-18073.5 Low
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated UsersCVE-2015-1806Fix available6.5 Medium
- adobe flash player, opensuse evergreen, opensuse +7 more +9 moreAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...CVE-2015-7645In KEVPublic exploitFix availableEPSS 65.3%7.8 High
- Show moreLoading…