Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during transaction processing in the editor during design...CVE-2017-5435Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA use-after-free vulnerability occurs when redirecting focus handling which results in a...CVE-2017-5434Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...CVE-2017-5433Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during certain text input selection resulting in a...CVE-2017-5432Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...CVE-2017-5430Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...CVE-2017-5429Fix available9.8 Critical
- firewalld, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 morefirewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify...CVE-2016-5410Fix available5.5 Medium
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4jCVE-2017-5645Public exploitFix availableEPSS 89.4%9.8 Critical
- redhat quickstart cloud installerThe web interface in Red Hat QuickStart Cloud Installer (QCI) 1.0 does not mask passwords fields,...CVE-2016-7060Fix available4.6 Medium
- redhat subscription-manager, enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses...CVE-2016-4455Fix available3.3 Low
- netty, apache cassandra, redhat jboss data grid +1 more +3 moreLoop with Unreachable Exit Condition in NettyCVE-2016-4970Fix availableEPSS 11.3%7.5 High
- redhat resteasyJacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attackCVE-2016-6348Fix available6.1 Medium
- redhat enterprise linux, mod cluster +1 moreStack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.CVE-2016-44597.5 High
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAMECVE-2017-3137Fix available7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"CVE-2017-3136Fix availableEPSS 11.1%5.9 Medium
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moresetroubleshoot allows local users to bypass an intended container protection mechanism and...CVE-2016-49897.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by...CVE-2016-44467.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to...CVE-2016-4445Fix available7.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary...CVE-2016-44447.0 High
- jasper, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreJasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded...CVE-2016-9600Fix available6.5 Medium
- jasper project jasper, oracle outside in technology, redhat enterprise linux desktop +5 more +7 moreAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper...CVE-2016-95835.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5056Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5054Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac,...CVE-2017-5053Fix available9.6 Critical
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133...CVE-2017-5052Fix available8.8 High
- snoopy, nagios, redhat openstack +2 moreSnoopy allows remote attackers to execute arbitrary commands. NOTE: this vulnerability exists...CVE-2014-50099.8 Critical
- samba, debian linux, redhat enterprise linux +2 moreSamba before versions 4.6.1, 4.5.7 and 4.4.11 are vulnerable to a malicious client using a...CVE-2017-2619Public exploitFix availableEPSS 11.0%7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreAn integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix...CVE-2017-5428Fix available9.8 Critical
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreChrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after...CVE-2017-5043Fix available8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreCast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5042Fix available5.7 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and...CVE-2017-5039Fix available7.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreChrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after...CVE-2017-5038Fix available6.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and...CVE-2017-5036Fix available7.8 High
- jqueryui jquery ui, debian linux, fedoraproject fedora +10 more +12 morejQuery-UI vulnerable to Cross-site Scripting in dialog closeTextCVE-2016-7103Fix availableEPSS 29.2%6.1 Medium
- qos logback, redhat satellite, satellite capsule +2 moreQOS.ch Logback vulnerable to Deserialization of Untrusted DataCVE-2017-5929Fix available9.8 Critical
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5046Fix available4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreXSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108...CVE-2017-5045Fix available6.1 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac,...CVE-2017-5044Fix available6.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5040Fix availableEPSS 27.4%4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...CVE-2017-5037Fix available7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreGoogle Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause...CVE-2017-5035Fix available8.1 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBlink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for...CVE-2017-5033Fix available4.3 Medium
- debian linux, google chrome, chromium v8 +3 more +5 moreIncorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux,...CVE-2017-5030In KEVFix availableEPSS 40.6%8.8 High
- debian linux, google chrome, xmlsoft libxslt +3 more +5 moreNokogiri implementation of libxslt lacks integer overflow checksCVE-2017-5029Fix available8.8 High
- pidgin, debian linux, redhat enterprise linux desktop +4 more +6 moreAn out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. A...CVE-2017-2640Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory corruption resulting in a potentially exploitable crash during garbage collection of...CVE-2017-5410Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreVideo files loaded video captions cross-origin without checking for the presence of CORS headers...CVE-2017-5408Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUsing SVG filters that don't use the fixed point math implementation on a target iframe, a...CVE-2017-5407Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreCertain response codes in FTP connections can result in the use of uninitialized values for ports...CVE-2017-5405Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free error can occur when manipulating ranges in selections with one node inside a...CVE-2017-5404Public exploitFix availableEPSS 16.9%9.8 Critical
- Show moreLoading…