Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...CVE-2018-12376Fix available9.8 Critical
- salesforce tough-cookie, ibm api connect, redhat openshift container platform +2 moreReDoS via long string of semicolons in tough-cookieCVE-2016-1000232Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16542Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16541Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...CVE-2018-16540Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16539Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be...CVE-2018-16511Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege"...CVE-2018-16509Public exploitFix availableEPSS 92.3%7.8 High
- [unknown] curl, canonical ubuntu linux, debian linux +2 more +4 morecurl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The...CVE-2018-14618Fix availableEPSS 10.7%7.5 High
- gluster glusterfs, debian linux, opensuse leap +4 more +6 moreA flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated...CVE-2018-10930Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreA flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated...CVE-2018-10929Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +4 more +6 moreA flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink...CVE-2018-10928Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreA flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated...CVE-2018-10927Fix available7.1 High
- gluster glusterfs, debian linux, opensuse leap +3 more +5 moreA flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An...CVE-2018-10926Fix available8.1 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that the "mknod" call derived from mknod(2) can create files pointing to devices on...CVE-2018-10923Fix available7.6 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster...CVE-2018-10914Fix available5.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreAn information disclosure vulnerability was discovered in glusterfs server. An attacker could...CVE-2018-10913Fix available3.5 Low
- gluster glusterfs, debian linux, opensuse leap +5 more +7 moreA flaw was found in the way dic_unserialize function of glusterfs does not handle negative key...CVE-2018-10911Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to...CVE-2018-10907Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats...CVE-2018-10904Fix available8.8 High
- redhat wildfly, [unknown] jboss/wildfly +1 moreThe IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when...CVE-2018-14627Fix available5.3 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 moreLittle CMS (aka Little Color Management System) 2.9 has an integer overflow in the...CVE-2018-16435Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...CVE-2018-16402Fix available9.8 Critical
- [unknown] postgresql, postgresql jdbc driver, redhat enterprise linux +2 moreModerate severity vulnerability that affects org.postgresql:pgjdbc-aggregateCVE-2018-10936Public exploitFix available8.1 High
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...CVE-2018-14622Fix available5.3 Medium
- redhat 389 directory server, red hat 389-ds-base +1 moreA flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP...CVE-2018-10935Fix available6.5 Medium
- grafana, redhat ceph storage +1 moreGrafana Authentication BypassCVE-2018-15727Public exploitFix availableEPSS 63.1%9.8 Critical
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...CVE-2018-15911Fix available7.8 High
- openstack cinder, openstack foundation openstack-cinder, redhat openstack +2 moreA vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly...CVE-2017-15139Fix available5.1 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-15910Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...CVE-2018-15909Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...CVE-2018-15908Fix available7.8 High
- apache mod perl, canonical ubuntu linux, debian linux +4 more +6 moremod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a...CVE-2011-2767Fix available9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is...CVE-2018-14599Fix available9.8 Critical
- redhat libvirtA NULL pointer deference flaw was found in the way libvirt from 2.5.0 to 3.0.0 handled empty...CVE-2017-2635Fix available7.7 High
- openstack tripleo-common, red hat openstack-tripleo-common, redhat openstack +2 moreA flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and...CVE-2017-26278.2 High
- red hat ansible tower, redhat cloudforms management engine +1 moreAnsible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF...CVE-2017-75285.2 Medium
- red hat satelliteIt was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to...CVE-2017-75135.4 Medium
- redhat ansible tower, red hat ansible-tower +1 moreAnsible Tower before versions 3.1.8 and 3.2.6 is vulnerable to cross-site request forgery (CSRF)...CVE-2018-108848.8 High
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...CVE-2018-10846Fix available5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...CVE-2018-10845Fix available5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...CVE-2018-10844Fix available5.9 Medium
- node.js, redhat openshift container platform +1 moreIn all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding ...CVE-2018-12115Fix available7.5 High
- linux kernel, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that the raw midi kernel driver does not protect against concurrent access which...CVE-2018-10902Fix available7.8 High
- ibm sdk, sdk, java technology edition, oracle enterprise manager base platform +4 more +6 moreThe IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java...CVE-2018-16567.4 High
- ibm sdk, java technology edition, software development kit, redhat enterprise linux desktop +3 more +5 moreA flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow...CVE-2018-15175.9 Medium
- libvirt, redhat enterprise linux, enterprise linux desktop +7 more +9 morelibvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...CVE-2015-5160Fix available5.5 Medium
- dom4j project dom4j, debian linux, netapp oncommand workflow automation +11 more +13 moreDom4j contains a XML Injection vulnerabilityCVE-2018-1000632Fix available7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability"...CVE-2018-12828Fix available9.8 Critical
- Show moreLoading…