Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2581Fix available4.9 Medium
- heketi project heketi, redhat openshift container platform +1 moreIt was found that default configuration of Heketi does not require any authentication potentially...CVE-2019-3899Fix available7.3 High
- kubernetes, netapp trident, redhat openshift container platform +2 morekubectl creates world-writeable cached schema filesCVE-2019-11244Fix available3.3 Low
- mercurial, debian linux, redhat enterprise linux +2 moreMercurial Path Traversal/Link Following vulnerabilityCVE-2019-3902Fix available5.1 Medium
- gnome evince, canonical ubuntu linux, debian linux +6 more +8 moreThe tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document...CVE-2019-11459Fix available5.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...CVE-2019-102457.5 High
- redhat libvirt, debian linux +1 morelibvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with...CVE-2016-10746Fix available7.5 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- red hat 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreIn 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will...CVE-2019-3883Fix available5.3 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11035Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11034Fix available4.8 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification...CVE-2018-16878Fix available6.2 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in the way pacemaker's client-server authentication was implemented in versions...CVE-2018-16877Fix available8.8 High
- freeradius, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreFreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is...CVE-2019-11235Fix available9.8 Critical
- freeradius, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreFreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a ...CVE-2019-11234Fix available9.8 Critical
- red hat candlepin, redhat satellite +1 moreIt was discovered that a world-readable log file belonging to Candlepin component of Red Hat...CVE-2019-38915.5 Medium
- broadcom brcmfmac wifi driver, brcmfmac driver, redhat enterprise linux +2 moreBroadcom brcmfmac driver is vulnerable to a frame validation bypassCVE-2019-9503Fix available7.9 High
- linux kernel, redhat enterprise linux +1 moreIt was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is...CVE-2019-3837Fix available6.1 Medium
- redhat satellite, red hat qpid-dispatch-router +1 moreA lack of access control was found in the message queues maintained by Satellite's QPID broker...CVE-2019-3845Fix available8.0 High
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2019-8544Fix available8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2019-8536Fix available8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...CVE-2019-8535Fix available8.8 High
- apple icloud, icloud for windows, ios +10 more +12 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...CVE-2019-8506In KEVPublic exploitFix availableEPSS 16.2%8.8 High
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreImproper Neutralization of Input During Web Page Generation in JenkinsCVE-2019-1003050Fix available5.4 Medium
- jenkins, oracle communications cloud native core automated test suite, redhat openshift container platform +2 moreInsufficient Session Expiration in JenkinsCVE-2019-1003049Fix available8.1 High
- isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 moreA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...CVE-2017-3139Fix available7.5 High
- the foreman foreman, redhat satellite +1 moreIn Foreman it was discovered that the delete compute resource operation, when executed from the...CVE-2019-38934.9 Medium
- microsoft nuget, .net core sdk, visual studio +6 more +8 moreA tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow...CVE-2019-0757Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreA flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access...CVE-2019-3887Fix available6.7 Medium
- samba, debian linux, fedoraproject fedora +3 more +5 moreA flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry...CVE-2019-3880Fix available4.2 Medium
- systemd, debian linux, fedoraproject fedora +1 more +3 moreIn systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the...CVE-2019-3842Public exploitFix available4.5 Medium
- palletsprojects jinja, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreJinja2 sandbox escape via string formattingCVE-2019-10906Fix available8.6 High
- openstack neutron, redhat openstack +1 moreOpenStack Neutron overlapping security group rules prevents compute node network configurationCVE-2019-10876Fix available6.5 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- redhat libvirt, fedoraproject fedora, opensuse leap +2 moreAn incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...CVE-2019-3886Fix available5.4 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- red hat web-console, redhat openshift container platform +1 moreWithdrawn Advisory: OpenShift OAuth Server XSS VulnerabilityCVE-2019-38765.0 Medium
- kubernetes, redhat openshift container platform +1 morekubectl cp path traversalCVE-2019-1002101Public exploitFix availableEPSS 12.8%6.4 Medium
- kubernetes, redhat openshift container platform +1 moreKubernetes DoS VulnerabilityCVE-2019-1002100Fix availableEPSS 16.9%6.5 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Pipeline: Groovy PluginCVE-2019-1003041Fix available9.8 Critical
- jenkins script security, jenkins project script security plugin, redhat openshift container platform +2 moreSandbox bypass vulnerability in Jenkins Script Security PluginCVE-2019-1003040Fix available9.8 Critical
- red hat tower, redhat ansible tower +1 moreWhen running Tower before 3.4.3 on OpenShift or Kubernetes, application credentials are exposed...CVE-2019-38697.2 High
- red hat wildfly-core, redhat jboss enterprise application platform, single sign-on +2 moreA cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions...CVE-2018-109345.4 Medium
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), fedoraproject fedora +6 more +8 moreBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...CVE-2019-0160Fix available8.7 High
- rubygems, debian linux, opensuse leap +1 more +3 moreCode injection in RubyGemsCVE-2019-8324Fix available8.8 High
- openstack ceilometer, [unknown] openstack-ceilometer, redhat openstack +2 moreCeilometer Prints Sensitive Configuration Data to LogCVE-2019-3830Fix available4.0 Medium
- [unknown] prometheus, redhat openshift container platform +1 moreWithdrawn Advisory: Prometheus XSS VulnerabilityCVE-2019-3826Fix available6.1 Medium
- [unknown] openstack-octavia, openstack octavia, redhat openstack +2 moreOpenstack Octavia allows Insertion of Sensitive Information into Log FileCVE-2018-16856Fix available5.5 Medium
- [unknown] cockpit, fedoraproject fedora, redhat virtualization +2 moreIt was found that cockpit before version 184 used glib's base64 decode functionality incorrectly...CVE-2019-3804Fix available7.5 High
- Show moreLoading…