Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- gnu mailman, canonical ubuntu linux, debian linux +6 more +8 moreCross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote...CVE-2018-5950Fix available6.1 Medium
- qemu, canonical ubuntu linux, debian linux +6 more +8 moreThe vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of...CVE-2018-5683Fix available6.0 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...CVE-2018-5117Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during font face manipulation when a font face is freed...CVE-2018-5104Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during mouse event handling due to issues with...CVE-2018-5103Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...CVE-2018-5102Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when the widget listener is holding strong references to...CVE-2018-5099Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when form input elements, focus, and selections are...CVE-2018-5098Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur during XSL transformations when the source document for...CVE-2018-5097Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...CVE-2018-5095Fix available9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF...CVE-2018-5091Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...CVE-2018-5089Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +6 more +8 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-5968Fix available8.1 High
- oracle jrockit, oracle corporation java, hp xp7 command view +10 more +12 moreVulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)....CVE-2018-26575.3 Medium
- oracle corporation java, oracle jdk, jre +5 more +7 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2018-26398.3 High
- oracle corporation java, netapp active iq unified manager, cloud backup +22 more +24 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2018-26388.3 High
- netapp active iq unified manager, cloud backup, e-series santricity management plug-ins +17 more +19 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer). Supported...CVE-2018-26277.5 High
- netapp active iq unified manager, cloud backup, e-series santricity management plug-ins +17 more +19 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported...CVE-2018-2581Fix available4.7 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2678Fix available4.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT)....CVE-2018-2677Fix available4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2668Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2665Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2663Fix available4.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT)....CVE-2018-2641Fix available6.1 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2640Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2637Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS)....CVE-2018-2634Fix available6.8 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2633Fix available8.3 High
- oracle jrockit, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2629Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2622Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2618Fix available5.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2603Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n)....CVE-2018-2602Fix available4.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2599Fix available4.8 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2588Fix available4.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-2582Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2579Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition)....CVE-2018-2562Fix available7.1 High
- red hat, inc. systemd, canonical ubuntu linux, debian linux +8 more +10 moreIn systemd prior to 234 a race condition exists between .mount and .automount units such that...CVE-2018-1049Public exploitFix available5.9 Medium
- isc bind, bind 9, debian linux +8 more +10 moreImproper fetch cleanup sequencing in the resolver can cause named to crashCVE-2017-3145Fix availableEPSS 27.7%7.5 High
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreA flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel...CVE-2017-15128Fix available5.5 Medium
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreA flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel...CVE-2017-15127Fix available5.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreIn the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization,...CVE-2018-5344Fix available7.8 High
- redhat cloudforms management engineThe check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as...CVE-2014-00878.8 High
- gnome gcab, canonical ubuntu linux, debian linux +7 more +9 moreA stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious...CVE-2018-5345Fix available7.8 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreIn glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be...CVE-2018-1000001Public exploitFix availableEPSS 13.4%7.8 High
- red hat jboss enterprise application platform, red hat, inc. hat jboss enterprise application platform, redhat enterprise linux +2 moreIt was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application...CVE-2017-121897.8 High
- fasterxml jackson-databind, debian linux, netapp e-series santricity os controller +5 more +7 morejackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypassCVE-2017-17485Public exploitFix availableEPSS 49.7%9.8 Critical
- red hat undertowUndertow vulnerable to Request SmugglingCVE-2017-7559Fix available6.1 Medium
- redhat hibernate validator, hibernate hibernate-validator, redhat jboss enterprise application platform +4 more +6 morePrivilege Escalation in Hibernate ValidatorCVE-2017-7536Fix available7.0 High
- Show moreLoading…