Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7864Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7863Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7862Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7861Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7860Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7859Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7858Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7857Fix available8.8 High
- google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840...CVE-2016-5198In KEVFix availableEPSS 34.2%8.8 High
- clusterlabs pacemaker, redhat enterprise linux server, enterprise linux server eus +2 moreAn authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its...CVE-2016-7035Fix available8.8 High
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...CVE-2016-8864Fix availableEPSS 38.7%7.5 High
- qemu, debian linux, opensuse leap +2 more +4 moreThe rtl8139_cplus_transmit function in hw/net/rtl8139.c in QEMU (aka Quick Emulator) allows local...CVE-2016-8910Fix available6.0 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreThe intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local...CVE-2016-8909Fix available6.0 Medium
- ceph, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object...CVE-2016-8626Fix available6.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and...CVE-2016-7855In KEVPublic exploitFix availableEPSS 25.2%8.8 High
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-5629Fix available4.9 Medium
- oracle mysql, mariadb, redhat enterprise linux eus +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-5626Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to...CVE-2016-5624Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and...CVE-2016-5612Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-3492Fix available6.5 Medium
- gnome shotwell, redhat enterprise linux +1 moreShotwell version 0.22.0 (and possibly other versions) is vulnerable to a TLS/SSL certification...CVE-2016-1000033Fix available3.7 Low
- qemu, debian linux, opensuse leap +2 more +4 moreThe serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows...CVE-2016-8669Fix available6.0 Medium
- qemu, debian linux, opensuse leap +2 more +4 moreThe xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest...CVE-2016-8576Fix available6.0 Medium
- openssl, debian linux, fujitsu m10-1 firmware +42 more +44 moreA denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in...CVE-2016-8610Public exploitFix availableEPSS 39.9%7.5 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...CVE-2016-4992Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...CVE-2016-5195In KEVPublic exploitFix availableEPSS 83.5%7.0 High
- redhat jboss enterprise application platformThe JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote...CVE-2016-7065Public exploitEPSS 12.5%8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X...CVE-2016-4286Fix available8.8 High
- redhat pagurePagure 2.2.1 XSS in raw file endpointCVE-2016-10000076.1 Medium
- systemd project systemd, novell suse linux enterprise desktop, suse linux enterprise server +6 more +8 moreThe manager_dispatch_notify_fd function in systemd allows local users to cause a denial of...CVE-2016-7796Fix available5.5 Medium
- redhat cloudforms management engineRed Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to...CVE-2016-7040Fix available8.8 High
- linux kernel, redhat enterprise mrg, linux +2 moreThe Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when...CVE-2016-36997.4 High
- openstack manila, redhat openstack +1 moreOpenstack Manila Persistent XSS in Metadata fieldCVE-2016-6519Fix available5.4 Medium
- redhat jboss enterprise application platformUndertow Uncaught Exception vulnerabilityCVE-2016-7046Fix available5.9 Medium
- redhat enterprise virtualizationThe ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0...CVE-2016-5432Fix available3.3 Low
- redhat jboss bpm suiteCross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite...CVE-2016-53985.4 Medium
- ceph project ceph, redhat ceph storage +1 moreThe RGW code in Ceph before 10.0.1, when authenticated-read ACL is applied to a bucket, allows...CVE-2016-7031Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers...CVE-2016-5178Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers...CVE-2016-5177Fix available8.8 High
- redhat jboss operations networkThe server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured...CVE-2016-6330EPSS 10.6%9.8 Critical
- apache artemis, redhat jboss enterprise application platform +1 moreApache ActiveMQ Artemis RCE Via Deserialization Gadget ChainCVE-2016-4978Fix available7.2 High
- redhat jboss enterprise application platformThe domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2...CVE-2016-54068.8 High
- redhat jboss enterprise application platform, jboss wildfly application server +1 moreImproper Neutralization of CRLF Sequences in Wildfly UndertowCVE-2016-4993Fix available6.1 Medium
- fedoraproject fedora, redhat jboss enterprise application platform, jboss enterprise web server +2 moremod_cluster Denial of Service vulnerabilityCVE-2016-3110Fix available7.5 High
- selinux project selinux, fedoraproject fedora, redhat enterprise linux desktop +4 more +6 moreSELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox...CVE-2016-7545Fix available8.8 High
- Show moreLoading…