Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking)....CVE-2018-2771Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-2761Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2018-2755Fix available7.7 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreThe set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex...CVE-2018-10194Fix available7.8 High
- theforeman foreman, unspecified foreman-debug, redhat satellite +2 moreforeman-debug before version 1.15.0 is vulnerable to a flaw in foreman-debug's logging. An...CVE-2016-95934.7 Medium
- redhat openshiftopenshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to...CVE-2016-95924.3 Medium
- legion of the bouncy castle bouncy castle, bouncycastle bc-java, redhat satellite +1 more +3 moreBouncy Castle BKS-V1 keystore files vulnerable to trivial hash collisionsCVE-2018-5382Fix available4.4 Medium
- libreoffice, canonical ubuntu linux, debian linux +3 more +5 moreThe SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4...CVE-2018-10120Fix available7.8 High
- libreoffice, canonical ubuntu linux, debian linux +3 more +5 moresot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an...CVE-2018-10119Fix available7.8 High
- perl, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular...CVE-2018-6798Fix available7.5 High
- perl, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap...CVE-2018-6797Fix available9.8 Critical
- redhat pcs, clusterlabs pacemaker command line interface, redhat enterprise linux +2 morepcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user...CVE-2018-1079Fix available8.7 High
- redhat rhn-client-toolsrhnreg_ks in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Gluster Storage 2.1...CVE-2015-17775.9 Medium
- corosync, canonical ubuntu linux, debian linux +1 more +3 morecorosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.CVE-2018-1084Fix available7.5 High
- red hat, inc. openshiftOpenShift Enterprise version 3.x is vulnerable to a stored XSS via the log viewer for pods. The...CVE-2017-75345.4 Medium
- zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 morezsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c...CVE-2018-1100Fix available7.8 High
- redhat pcs, clusterlabs pacemaker command line interface, debian linux +1 more +3 morepcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST...CVE-2018-1086Fix available4.3 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- gnu patch, canonical ubuntu linux, debian linux +6 more +8 moreGNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files,...CVE-2018-1000156Fix available7.8 High
- foreman project foreman, redhat satellite +1 moreAn input sanitization flaw was found in the id field in the dashboard controller of Foreman...CVE-2018-10966.5 Medium
- foreman project foreman, redhat satellite +1 moreA flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for...CVE-2018-10978.8 High
- etcd-io etcd, fedoraproject fedora +1 moreDNS Rebinding in etcdCVE-2018-1099Fix available5.5 Medium
- etcd-io etcd, fedoraproject fedora +1 moreetcd Cross-site Request Forgery (CSRF)CVE-2018-1098Fix available8.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...CVE-2018-8778Fix available7.5 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...CVE-2018-8777Fix available7.5 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...CVE-2018-6914Fix availableEPSS 10.2%7.5 High
- apple icloud, itunes, safari +8 more +10 moreAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...CVE-2018-4117Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreThe ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not...CVE-2018-1094Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...CVE-2018-7566Fix available7.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA use-after-free vulnerability can occur in the compositor during certain graphics operations...CVE-2018-5148Fix available9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...CVE-2018-1301Fix availableEPSS 14.5%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...CVE-2018-1283Fix available5.3 Medium
- zsh, canonical ubuntu linux, debian linux +3 more +5 moreZsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete...CVE-2018-1083Fix available7.8 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...CVE-2017-15715Public exploitFix availableEPSS 86.2%8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...CVE-2017-15710Fix availableEPSS 17.5%7.5 High
- exiv2, debian linux, redhat enterprise linux desktop +2 more +4 moreIn Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2...CVE-2018-8976Fix available6.5 Medium
- rsyslog librelp, canonical ubuntu linux, debian linux +6 more +8 morersyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the...CVE-2018-1000140Public exploitFix available9.8 Critical
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka...CVE-2018-8945Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +3 more +5 moreIn LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw...CVE-2018-8905Fix available8.8 High
- qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 moreImproper Access Control in SLF4JCVE-2018-8088Fix availableEPSS 14.7%9.8 Critical
- redhat ceph, fedoraproject fedora +1 moreIn Ceph before 12.2.3 and 13.x through 13.0.1, the rgw_civetweb.cc RGWCivetWeb::init_env function...CVE-2018-7262Fix available7.5 High
- vmware spring framework, spring security, dell emc spring by pivotal +3 more +5 moreImproper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-coreCVE-2018-1199Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...CVE-2018-5146Public exploitFix availableEPSS 11.9%8.8 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreA flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for...CVE-2018-1068Fix available6.7 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...CVE-2018-5145Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn integer overflow can occur during conversion of text to some Unicode character sets due to an...CVE-2018-5144Fix available7.3 High
- red hat spacewalk, redhat satellite +1 moreSpacewalk 2.6 contains an API which has an XXE flaw allowing for the disclosure of potentially...CVE-2018-10777.5 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreUnder certain circumstances the "fetch()" API can return transient local copies of resources that...CVE-2018-5131Fix available5.9 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen packets with a mismatched RTP payload type are sent in WebRTC connections, in some...CVE-2018-5130Fix available8.8 High
- Show moreLoading…