Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x...CVE-2018-16396Fix available8.1 High
- ruby-lang openssl, ruby, canonical ubuntu linux +2 more +4 moreRuby Openssl Allows Incorrect Value ComparisonCVE-2018-16395Fix availableEPSS 10.7%9.8 Critical
- systemd, canonical ubuntu linux, debian linux +6 more +8 moreOut-of-Bounds write in systemd-networkd dhcpv6 option handlingCVE-2018-15688Fix available8.8 High
- x.org x server, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath...CVE-2018-14665Public exploitFix availableEPSS 27.2%6.6 Medium
- zmanda amanda, redhat enterprise linux +1 moreAn issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a...CVE-2016-10730Fix available7.8 High
- zmanda amanda, debian linux, redhat enterprise linux +2 moreAn issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a...CVE-2016-10729Fix available7.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA WebExtension can request access to local files without the warning prompt stating that the...CVE-2018-12397Fix available7.1 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where a WebExtension can run content scripts in disallowed contexts following...CVE-2018-12396Fix available6.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreBy rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain...CVE-2018-12395Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability was found in 32-bit builds where an integer overflow during the...CVE-2018-12393Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreWhen manipulating user events in nested loops while opening a document through script, it is...CVE-2018-12392Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 62 and...CVE-2018-12390Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2....CVE-2018-12389Fix available8.8 High
- [unknown] ansible, debian linux, redhat ansible engine +2 more +4 moreAnsible Leaks Data Passed to ssh-keygenCVE-2018-16837Fix available7.8 High
- linux kernel, redhat enterprise linux desktop, enterprise linux server +6 more +8 moreIn the Linux kernel through 4.19, a use-after-free can occur due to a race condition between...CVE-2018-18559Fix available8.1 High
- kyzer libmspack, canonical ubuntu linux, debian linux +5 more +7 morechmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0'...CVE-2018-18585Fix available4.3 Medium
- cabextract project cabextract, libmspack project libmspack, canonical ubuntu linux +4 more +6 moreIn mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input...CVE-2018-18584Fix available6.5 Medium
- qemu, redhat enterprise linux, openstack +2 moreQemu has integer overflows because IOReadHandler and its associated functions use a signed...CVE-2018-18438Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreDivide-by-zero vulnerabilities in the function arlib_add_symbols() in arlib.c in elfutils 0.174...CVE-2018-18521Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreAn Invalid Memory Address Dereference exists in the function elf_end in libelf in elfutils...CVE-2018-18520Fix available6.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...CVE-2018-18284Fix availableEPSS 16.3%8.6 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreIn the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation...CVE-2018-18445Fix available7.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage...CVE-2018-3282Fix available4.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3214Fix available5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3183Fix available9.0 Critical
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3180Fix available5.6 Medium
- canonical ubuntu linux, debian linux, hp xp7 command view +10 more +12 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-3169Fix available8.3 High
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3149Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3139Fix available3.1 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3136Fix available3.4 Low
- [unknown] libssh, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4....CVE-2018-10933Public exploitFix availableEPSS 91.8%9.1 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging...CVE-2018-18073Fix available6.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism...CVE-2018-17961Public exploitFix available8.6 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moreAn invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl...CVE-2018-18310Fix available5.5 Medium
- redhat ceph storage, [unknown] ceph-iscsi-cli, redhat enterprise linux desktop +2 more +4 moreIt was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using...CVE-2018-14649Fix availableEPSS 12.0%9.8 Critical
- python requests, canonical ubuntu linux, opensuse leap +3 more +5 moreInsufficiently Protected Credentials in RequestsCVE-2018-18074Public exploitFix available7.5 High
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreqemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which...CVE-2018-17963Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data...CVE-2018-17962Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +2 more +4 moreQemu has a Buffer Overflow in rtl8139_do_receive in hw/net/rtl8139.c because an incorrect integer...CVE-2018-17958Fix available7.5 High
- pyopenssl project pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 morePyopenssl Incorrect Memory ManagementCVE-2018-1000808Fix available5.9 Medium
- pyopenssl, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 morePyOpenSSL Use-After-Free vulnerabilityCVE-2018-1000807Fix available8.1 High
- paramiko, canonical ubuntu linux, debian linux +8 more +10 moreParamiko Authentication Bypass vulnerabilityCVE-2018-1000805Fix available8.8 High
- git-scm git, canonical ubuntu linux, debian linux +8 more +10 moreGit before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x...CVE-2018-17456Public exploitFix availableEPSS 97.4%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat Open Redirect vulnerabilityCVE-2018-11784Public exploitFix availableEPSS 97.7%4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel...CVE-2018-17972Fix available5.5 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple...CVE-2018-12387Fix available9.1 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreA vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an...CVE-2018-12386Public exploitFix availableEPSS 13.5%8.1 High
- fedoraproject 389 directory server, [unknown] 389-ds-base:, debian linux +1 more +3 moreA flaw was found in 389 Directory Server. A specially crafted search query could lead to...CVE-2018-14648Fix available7.5 High
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreCiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption...CVE-2018-17581Fix available6.5 Medium
- [unknown] sos-collector, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that sos-collector does not properly set the default permissions of newly...CVE-2018-14650Fix available5.9 Medium
- Show moreLoading…