Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0640Fix available6.1 Medium
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote...CVE-2016-0639Fix availableEPSS 10.2%9.8 Critical
- openstack tripleo heat templates, redhat openstack +1 moreTripleO Heat templates might allow remote attackers to obtain sensitive information from private containersCVE-2015-5271Fix available7.5 High
- linuxfoundation foomatic-filters, oracle linux, redhat enterprise linux +5 more +7 moreHeap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4...CVE-2010-5325Fix available9.8 Critical
- redhat libvirt, canonical ubuntu linux +1 moreThe virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users...CVE-2015-5247Fix available6.5 Medium
- redhat satellite, spacewalk-java +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Web UI in Spacewalk and Red Hat...CVE-2016-30796.1 Medium
- redhat satelliteMultiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers...CVE-2016-21036.1 Medium
- redhat satellite, spacewalk-java +1 moreCross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7...CVE-2015-02845.4 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...CVE-2016-4020Fix available6.5 Medium
- xen, redhat enterprise linux +1 moreXen allows guest OS users to obtain sensitive information from uninitialized locations in host OS...CVE-2015-8553Fix available6.5 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreThe fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of...CVE-2016-2143Fix available7.8 High
- kubernetes, redhat openshift +1 moreInformation Exposure in KubernetesCVE-2015-7528Fix available5.3 Medium
- redhat cloudforms, cloudforms management engine +1 moreRed Hat CloudForms 3.2 Management Engine (CFME) 5.4.4 and CloudForms 4.0 Management Engine (CFME)...CVE-2015-7502Fix available5.1 Medium
- redhat openstackThe TripleO Heat templates (tripleo-heat-templates), as used in Red Hat Enterprise Linux...CVE-2015-53297.3 High
- theforeman foreman, redhat satellite +1 moreForeman before 1.8.4 and 1.9.x before 1.9.1 do not properly apply view_hosts permissions, which...CVE-2015-5233Fix available4.2 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...CVE-2016-2857Fix available8.4 High
- redhat enterprise linux, enterprise linux desktop, enterprise linux hpc node +5 more +7 moreThe calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not...CVE-2015-5229Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins allows Deserialization of Untrusted Data via an XML FileCVE-2016-0792Public exploitFix availableEPSS 83.3%8.8 High
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-0791Fix available9.8 Critical
- jenkins, redhat openshift +1 moreExposure of Sensitive Information in Jenkins CoreCVE-2016-0790Fix available5.3 Medium
- jenkins, redhat openshift +1 moreJenkins has CRLF Injection Vulnerability in the CLICVE-2016-0789Fix available6.1 Medium
- jenkins, redhat openshift +1 moreJenkins allows Execution of Code by Opening a JRMP ListenerCVE-2016-0788Fix availableEPSS 11.8%9.8 Critical
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repositoryCVE-2016-3069Fix available8.8 High
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial arbitrary code execution via a crafted git ext:: URLCVE-2016-3068Fix available8.8 High
- redhat jboss wildfly application serverWildFly has incomplete blacklist vulnerabilityCVE-2016-0793Public exploitFix availableEPSS 15.0%7.5 High
- openvswitch, redhat openshift +1 moreBuffer overflow in lib/flow.c in ovs-vswitchd in Open vSwitch 2.2.x and 2.3.x before 2.3.3 and 2...CVE-2016-2074Fix available9.8 Critical
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...CVE-2016-1646In KEVFix availableEPSS 48.1%8.8 High
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...CVE-2016-1762Fix available8.1 High
- oracle jdk, jre, redhat enterprise linux desktop +4 more +6 moreUnspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to...CVE-2016-0636Fix available8.1 High
- fedoraproject 389 directory server, redhat enterprise linux, enterprise linux desktop +3 more +5 moreslapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3...CVE-2016-0741Fix available7.5 High
- libssh, canonical ubuntu linux, debian linux +2 more +4 morelibssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman...CVE-2016-0739Fix available5.9 Medium
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- ibm java sdk, websphere application server, redhat satellite +2 more +4 moreThe J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before...CVE-2015-50419.1 Critical
- mit kerberos 5, debian linux, opensuse leap +7 more +9 moreMultiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)...CVE-2015-8631Fix available6.5 Medium
- mit kerberos 5, debian linux, opensuse leap +8 more +10 moreThe xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)...CVE-2015-8629Fix available5.3 Medium
- jenkins, redhat openshift +1 moreJenkins does not Verify Checksums for Plugin FilesCVE-2015-7539Fix available7.5 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-7538Fix available8.8 High
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Cross-Site Request Forgery (CSRF) AttackCVE-2015-7537Fix available8.8 High
- rails ruby on rails, rubyonrails rails, debian linux +4 more +6 moreDirectory traversal vulnerability in Action View in Ruby on RailsCVE-2016-0752In KEVPublic exploitFix availableEPSS 95.5%7.5 High
- f5 nginx, apple xcode, canonical ubuntu linux +3 more +5 moreThe resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a...CVE-2016-0742Fix availableEPSS 82.4%7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreMultiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome...CVE-2016-2051Fix available9.8 Critical
- mariadb, oracle mysql, canonical ubuntu linux +3 more +5 moreThe ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x...CVE-2016-2047Fix available5.9 Medium
- oracle mysql, opensuse leap, opensuse +1 more +3 moreUnspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to...CVE-2016-0605Fix available2.1 Low
- openstack orchestration api, redhat openstack, fedoraproject fedora +1 more +3 moreThe template-validate command in OpenStack Orchestration API (Heat) before 2015.1.3 (kilo) and 5...CVE-2015-5295Fix available5.4 Medium
- mariadb, oracle mysql, canonical ubuntu linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x...CVE-2016-0616Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, opensuse leap +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote...CVE-2016-0611Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +4 more +6 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1...CVE-2016-0610Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0609Fix available1.7 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0608Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, opensuse leap +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote...CVE-2016-0607Fix available2.8 Low
- Show moreLoading…