Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9131Fix availableEPSS 40.6%7.5 High
- icoutils project icoutils, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to...CVE-2017-5208Fix available8.8 High
- gnu bash, debian linux, redhat enterprise linux desktop +5 more +7 morepopd in bash might allow local users to bypass the restricted shell and cause a use-after-free...CVE-2016-9401Fix available5.5 Medium
- qemu, citrix xenserver, debian linux +7 more +9 moreA heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display...CVE-2016-9603Fix available5.5 Medium
- red hat spice, debian linux, redhat enterprise linux desktop +4 more +6 moreA vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. An...CVE-2016-9577Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...CVE-2016-7056Fix available5.5 Medium
- the openjpeg project openjpeg, debian linux, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool....CVE-2016-9573Fix available6.5 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreQuick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a...CVE-2016-9921Fix available6.5 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreQuick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage...CVE-2016-9911Fix available6.5 Medium
- qemu, debian linux, redhat openstack +1 more +3 moreQuick Emulator (Qemu) built with the USB redirector usb-guest support is vulnerable to a memory...CVE-2016-9907Fix available6.5 Medium
- uclouvain openjpeg, redhat enterprise linux, enterprise linux for ibm z systems +2 more +4 moreopenjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted...CVE-2016-96757.8 High
- redhat enterprise linux, enterprise linux desktop, enterprise linux hpc node +2 more +4 moresudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and...CVE-2016-7091Fix available4.4 Medium
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- curlcurl before version 7.52.0 is vulnerable to a buffer overflow when doing a large floating point...CVE-2016-9586Fix available5.9 Medium
- [unknown] samba, redhat enterprise linux desktop, enterprise linux server +5 more +7 moreIt was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets...CVE-2016-2125Fix available6.4 Medium
- jasper project jasper, debian linux, redhat enterprise linux desktop +3 more +5 moreJasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG...CVE-2016-9591Fix available5.5 Medium
- redhat enterprise virtualizationRed Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys...CVE-2016-4443Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...CVE-2016-9905Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...CVE-2016-9904Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux desktop +4 more +6 moreThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...CVE-2016-9902Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux aus +4 more +6 moreHTML tags received from the Pocket server will be processed without sanitization and any...CVE-2016-9901Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreExternal resources that should be blocked when loaded by SVG images can bypass security...CVE-2016-9900Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating DOM events and removing audio elements due to errors in the...CVE-2016-9899Public exploitFix availableEPSS 19.4%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...CVE-2016-9898Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...CVE-2016-9897Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...CVE-2016-9895Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...CVE-2016-9893Fix available9.8 Critical
- ceph, redhat ceph storage, ceph storage mon +4 more +6 moreA flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the...CVE-2016-9579Fix available6.5 Medium
- jasper project jasper, debian linux, redhat enterprise linux desktop +5 more +7 moreStack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1...CVE-2016-9560Fix available7.8 High
- ntp, canonical ubuntu linux, hpe hpux-ntp +6 more +8 moreNTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting...CVE-2016-7426Fix availableEPSS 12.4%7.5 High
- gstreamer, debian linux, fedoraproject fedora +6 more +8 moreThe windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE...CVE-2016-9811Fix available4.7 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA missing check for whether a property of a JS object is private in V8 in Google Chrome prior to...CVE-2016-9651Public exploitFix availableEPSS 11.2%8.8 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...CVE-2016-9079In KEVPublic exploitFix availableEPSS 87.4%7.5 High
- jasper project jasper, debian linux, redhat enterprise linux desktop +4 more +6 moreA heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being...CVE-2016-8654Fix available7.8 High
- dovecot, fedora dovecot22, opensuse leap +2 more +4 moreA postinstall script in the dovecot rpm allows local users to read the contents of newly created...CVE-2016-4983Fix available3.3 Low
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9636Fix available9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9635Fix available9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9634Fix available9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerabilityCVE-2016-8735In KEVFix availableEPSS 90.3%9.8 Critical
- qemu, opensuse leap, redhat openstack +1 more +3 moreThe virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local...CVE-2016-7422Fix available6.0 Medium
- clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 morePacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a...CVE-2016-7797Fix available7.5 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 moreSerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux...CVE-2016-7050Fix available9.8 Critical
- gstreamer, fedoraproject fedora, redhat enterprise linux desktop +5 more +7 moreThe vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote...CVE-2016-9446Fix available7.5 High
- mozilla nss, network security services, redhat enterprise linux desktop +5 more +7 moreIt was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to...CVE-2016-8635Fix available5.3 Medium
- mozilla network security services, avaya aura application enablement services, aura application server 5300 +25 more +27 moreNull pointer dereference vulnerability exists in K11_SignWithSymKey /...CVE-2016-5285Fix available7.5 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7865Fix available8.8 High
- Show moreLoading…