Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- ovirt, [unknown] ovirt-engine-setup, redhat enterprise virtualization manager +2 moreovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log...CVE-2018-10725.0 Medium
- rubyzip project rubyzip, debian linux, redhat cloudforms +2 moreRubyzip gem contains a Directory Traversal vulnerability in zip file componentCVE-2018-1000544Fix available9.8 Critical
- [unknown] sssd, debian linux, redhat enterprise linux desktop +2 more +4 moreThe UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too...CVE-2018-10852Fix available3.8 Low
- [unknown] foreman, redhat satellite +1 moreA flaw was found in foreman before version 1.15 in the logging of adding and registering images....CVE-2017-26726.5 Medium
- hackerone sprockets, debian linux, redhat cloudforms +1 more +3 moreSprockets path traversal leads to information leakCVE-2018-3760Public exploitFix availableEPSS 26.3%7.5 High
- [unknown] ovirt-ansible-roles, redhat enterprise virtualization +1 moreovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive,...CVE-2018-1117Fix available5.0 Medium
- [unknown] ovirt-engine, redhat virtualization, virtualization host +2 moreThe web console login form in ovirt-engine before version 4.2.3 returned different errors for non...CVE-2018-10735.3 Medium
- [unknown] pulp, fedoraproject fedora, redhat satellite +2 moreIn Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and...CVE-2018-10905.5 Medium
- redhat richfacesArbitrary code execution in RichfacesCVE-2018-12533Public exploitFix availableEPSS 18.7%9.8 Critical
- redhat richfacesRichFaces vulnerable to Expression Language InjectionCVE-2018-125329.8 Critical
- apache http server, canonical ubuntu linux, netapp cloud backup +2 more +4 moreDoS for HTTP/2 connections by crafted requestsCVE-2018-1333Fix availableEPSS 17.0%7.5 High
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreAn Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis...CVE-2018-11219Fix available9.8 Critical
- redislabs redis, debian linux, oracle communications operations monitor +1 more +3 moreMemory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2...CVE-2018-11218Public exploitFix availableEPSS 58.8%9.8 Critical
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow...CVE-2018-5002In KEVFix availableEPSS 24.1%7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability....CVE-2018-5001Fix availableEPSS 12.9%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability....CVE-2018-5000Fix availableEPSS 13.4%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability....CVE-2018-4945Fix available8.8 High
- [unknown] openshift-ansible, redhat openshift container platform +1 moreopenshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes...CVE-2018-10859.0 Critical
- intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 moreSystem software utilizing Lazy FP state restore technique on systems using Intel Core-based...CVE-2018-3665Fix available5.6 Medium
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +7 more +9 more389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds...CVE-2018-10850Fix available5.9 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- debian linux, google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +4 more +6 moreIn the function wmi_set_ie(), the length validation code does not handle unsigned integer...CVE-2018-5848Fix available7.8 High
- redhat source-to-image, openshift enterprise unsanitized paths in tar.go +1 moreOpenshift Enterprise source-to-image vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)CVE-2018-1103Fix available6.1 Medium
- [unknown] routing, redhat openshift container platform +1 morerouting before version 3.10 is vulnerable to an improper input validation of the Openshift...CVE-2018-10706.5 Medium
- codehaus plexus-archiver, debian linux, redhat enterprise linux +2 more +4 moreImproper Limitation of a Pathname to a Restricted Directory in plexus-archiverCVE-2018-1002200Public exploitFix availableEPSS 11.6%5.5 Medium
- gnupg, canonical ubuntu linux, debian linux +6 more +8 moremainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...CVE-2018-12020Fix available7.5 High
- bouncycastle bc-java, fips java api, debian linux +17 more +19 moreBouncy Castle has a flaw in the Low-level interface to RSA key pair generatorCVE-2018-1000180Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62...CVE-2018-6147Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6144Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6143Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed...CVE-2018-6141Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAllowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to...CVE-2018-6140Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0...CVE-2018-6139Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreCSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak...CVE-2018-6137Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome...CVE-2018-6135Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396...CVE-2018-6133Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreEarly free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote...CVE-2018-6127Fix available9.6 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a...CVE-2018-6124Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6123Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0...CVE-2018-6084Public exploit7.8 High
- bouncycastle legion-of-the-bouncy-castle-java-crytography-api, canonical ubuntu linux, netapp 7-mode transition tool +2 more +4 moreIn Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validateCVE-2016-1000338Fix available7.5 High
- sinatrarb sinatra, redhat cloudforms +1 moreSinatra Cross-site Scripting vulnerabilityCVE-2018-11627Fix available6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6126Public exploitFix available8.8 High
- Show moreLoading…