Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- redhat quickstart cloud installerThe kickstart file in Red Hat QuickStart Cloud Installer (QCI) forces use of MD5 passwords on...CVE-2016-63408.4 High
- redhat quickstart cloud installerRed Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers,...CVE-2016-63228.4 High
- qemu, opensuse leap, redhat openstack +1 more +3 moreMemory leak in the usb_xhci_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when...CVE-2016-7466Fix available6.0 Medium
- libarchive, oracle linux, redhat enterprise linux desktop +7 more +9 moreThe sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non...CVE-2016-5418Fix available7.5 High
- mariadb, oracle mysql, percona server +9 more +11 moreOracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5...CVE-2016-6662Public exploitFix availableEPSS 67.7%9.8 Critical
- uclouvain openjpeg, debian linux, fedoraproject fedora +6 more +8 moreInteger overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers...CVE-2016-7163Fix available7.8 High
- libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 morelibarchive before 3.2.0 does not limit the number of recursive decompressions, which allows...CVE-2016-7166Fix available5.5 Medium
- redhat jboss operations networkThe web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly...CVE-2016-54228.8 High
- redhat jboss bpm suiteThe dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated...CVE-2016-70348.8 High
- redhat jboss bpm suiteMultiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat...CVE-2016-70336.1 Medium
- redhat resteasyDenial of service in JBoss resteasyCVE-2016-6346Fix available7.5 High
- redhat resteasyExposure of Sensitive Information to an Unauthorized Actor in RESTEasyCVE-2016-6345Fix available6.5 Medium
- redhat jboss bpm suiteRed Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for...CVE-2016-63445.3 Medium
- cisco content security management appliance, nodejs node.js, openssl +6 more +8 moreThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...CVE-2016-2183Public exploitFix availableEPSS 94.7%7.5 High
- redhat cloudformsThe web UI in Red Hat CloudForms 4.1 allows remote authenticated users to execute arbitrary code...CVE-2016-5383Fix available8.8 High
- qemu, debian linux, redhat openstack +1 more +3 moreInteger overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick...CVE-2016-6888Fix available4.4 Medium
- qemu, debian linux, redhat virtualization +2 moreThe vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator)...CVE-2016-6835Fix available6.0 Medium
- redhat openshiftRed Hat Security Advisory: atomic-openshift security and bug fix updateCVE-2016-5392Fix available6.5 Medium
- redhat dashbuilder, jboss bpm suite, jboss enterprise brms platform +2 moreSQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder...CVE-2016-4999Public exploit9.8 Critical
- redhat satelliteCross-site scripting (XSS) vulnerability in spacewalk-java in Red Hat Satellite 5.7 allows remote...CVE-2016-30806.1 Medium
- redhat jboss operations networkThe server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to...CVE-2016-37379.8 Critical
- nettle project nettle, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe RSA and DSA decryption code in Nettle makes it easier for attackers to discover private keys...CVE-2016-6489Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to...CVE-2016-5403Fix available5.5 Medium
- google chrome, xmlsoft libxml2, apple iphone os +14 more +16 moreUse-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743...CVE-2016-5131Fix available8.8 High
- oracle linux, redhat enterprise linux server, enterprise linux workstation +2 moreStack-based buffer overflow in the munge_other_line function in cachemgr.cgi in the squid package...CVE-2016-5408Fix available9.8 Critical
- mariadb, oracle mysql, ibm powerkvm +8 more +10 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-5444Fix available3.7 Low
- oracle mysql, mariadb, redhat enterprise linux +2 moreUnspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local...CVE-2016-3471Fix available7.5 High
- mariadb, oracle mysql, ibm powerkvm +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and...CVE-2016-3452Fix available3.7 Low
- mariadb, oracle mysql, canonical ubuntu linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-5440Fix available4.9 Medium
- isc bind, fedoraproject fedora, hp hp-ux +6 more +8 moreISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...CVE-2016-2775Fix availableEPSS 63.3%5.9 Medium
- apache tomcat, hp system management homepage, oracle linux +8 more +10 moreImproper Access Control in Apache TomcatCVE-2016-5388Fix availableEPSS 50.9%8.1 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- golang go, fedoraproject fedora, oracle linux +3 more +5 moreThe net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18...CVE-2016-5386Fix available8.1 High
- php, debian linux, drupal +9 more +11 moreHTTP Proxy header vulnerabilityCVE-2016-5385Fix availableEPSS 50.4%8.1 High
- kernel util-linux, ibm power hardware management console, powerkvm +6 more +8 moreThe parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows...CVE-2016-5011Fix available4.6 Medium
- canonical openstack ironic, redhat openstack +1 moreOpenStack Ironic Exposure of Sensitive Information to an Unauthorized ActorCVE-2016-4985Fix available7.5 High
- redhat ceph, ceph storage mon, ceph storage osd +4 more +6 moreThe handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause...CVE-2016-5009Fix available6.5 Medium
- isc bind, redhat enterprise linux +1 moreISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.11.x through 9.11.0b1 allows primary...CVE-2016-6170Fix availableEPSS 40.9%6.5 Medium
- redhat libvirt, debian linux +1 morelibvirt before 2.0.0 improperly disables password checking when the password on a VNC server is...CVE-2016-5008Fix available9.8 Critical
- redhat openstackThe image build process for the overcloud images in Red Hat OpenStack Platform 8.0 (Liberty)...CVE-2016-4474Fix available8.8 High
- redhat jgroups, jboss enterprise application platform +1 moreImproper Input Validation in JGroupsCVE-2016-2141Fix available9.8 Critical
- linux kernel-rt, redhat enterprise linux for real time, novell suse linux enterprise real time extension +1 more +3 moreThe icmp_check_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the...CVE-2016-3707Fix available8.1 High
- linux kernel, oracle linux, novell suse linux enterprise real time extension +11 more +13 moreThe key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does...CVE-2016-4470Fix available5.5 Medium
- libarchive, oracle linux, solaris +7 more +9 moreInteger overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a...CVE-2016-5844Fix available6.5 Medium
- libgd, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd)...CVE-2016-5766Fix available8.8 High
- libarchive, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreHeap-based buffer overflow in the parse_codes function in archive_read_support_format_rar.c in...CVE-2016-4302Fix available7.8 High
- libarchive, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreInteger overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in...CVE-2016-4300Fix available7.8 High
- openstack horizon, redhat openstack, debian linux +2 moreOpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerabilityCVE-2016-4428Fix available5.4 Medium
- libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 moreThe archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in...CVE-2016-4809Fix available7.5 High
- google chrome, canonical ubuntu linux, novell suse package hub for suse linux enterprise +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...CVE-2016-1704Fix available8.8 High
- Show moreLoading…