Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2CVE-2021-4104Public exploitFix availableEPSS 80.6%7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization...CVE-2021-4093Fix available8.8 High
- lapack project lapack, openblas project openblas, fedoraproject fedora +5 more +7 moreAn out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in...CVE-2021-4048Fix available9.1 Critical
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 morePotential bypass of an upstream access control based on URL paths in DjangoCVE-2021-44420Fix available7.3 High
- qemu, debian linux, redhat codeready linux builder +7 more +9 moreAn off-by-one error was found in the SCSI device emulation in QEMU. It could occur while...CVE-2021-3930Fix available6.5 Medium
- redhat libvirt, canonical ubuntu linux, debian linux +11 more +13 moreA use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in...CVE-2021-3975Public exploitFix available6.5 Medium
- pgbouncer, debian linux, fedoraproject fedora +1 more +3 moreWhen PgBouncer is configured to use "cert" authentication, a man-in-the-middle attacker can...CVE-2021-3935Fix available8.1 High
- ruby-lang date, ruby, debian linux +6 more +8 moreRegular expression denial of service vulnerability (ReDoS) in dateCVE-2021-41817Fix available7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux...CVE-2021-20320Fix available5.5 Medium
- academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 moreIn ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...CVE-2021-3941Fix available6.5 Medium
- fedoraproject fedora, postgresql, redhat enterprise linux +3 more +5 moreWhen the server is configured to use trust authentication with a clientcert requirement or to use...CVE-2021-23214Fix available8.1 High
- red hat httpd, redhat enterprise linux +1 moreMissing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red...CVE-2021-20325Fix available9.8 Critical
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- redhat coreos-installercoreos-installer < 0.10.0 writes world-readable Ignition config to installed systemCVE-2021-3917Fix available5.5 Medium
- canonical ubuntu linux, fedoraproject fedora, openvswitch +1 more +3 moreA memory leak was found in Open vSwitch (OVS) during userspace IP fragmentation processing. An...CVE-2021-3905Fix available7.5 High
- udisks project udisks, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in udisks2. This flaw allows an attacker to input a specially crafted image...CVE-2021-3802Fix available4.2 Medium
- debian linux, linux kernel, oracle communications cloud native core binding support function +3 more +5 moreAn issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds...CVE-2021-43389Fix available5.5 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreHeap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that...CVE-2021-42781Fix available5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA use after return issue was found in Opensc before version 0.22.0 in insert_pin function that...CVE-2021-42780Fix available5.3 Medium
- opensc, fedoraproject fedora, redhat enterprise linux +2 moreA heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.CVE-2021-42779Fix available5.3 Medium
- red hat ansible, redhat ansible engine, ansible automation platform early access +7 more +9 moreAnsible discloses sensitive information in traceback error messageCVE-2021-3620Fix available5.5 Medium
- debian linux, linux kernel, redhat enterprise linux +2 moreModerate: kernel security and bug fix updateCVE-2021-20321Fix available4.7 Medium
- redhat coreos-installercoreos-installer improperly verifies GPG signature when decompressing gzipped artifactCVE-2021-20319Fix available7.8 High
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA flaw was found in the Linux kernel. Measuring usage of the shared memory does not scale with...CVE-2021-3669Fix available5.5 Medium
- redis, debian linux, fedoraproject fedora +5 more +7 moreVulnerability in Lua Debugger in RedisCVE-2021-32672Fix available5.3 Medium
- microsoft usbredir, debian linux, fedoraproject fedora +1 more +3 moreA use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the...CVE-2021-3700Fix available6.4 Medium
- cockpit-hq cockpit, redhat enterprise linux +1 moreCockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to...CVE-2021-3660Fix available4.3 Medium
- microsoft hivex, fedoraproject fedora, redhat enterprise linux +1 more +3 moreA flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted...CVE-2021-3622Fix available4.3 Medium
- red hat ansible, redhat ansible automation platform, ansible engine +1 more +3 moreImproper Input Validation and Command Injection in AnsibleCVE-2021-3583Fix available7.1 High
- infinispan infinispan-server-rest, redhat data grid +1 moreA flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0...CVE-2021-319179.8 Critical
- debian linux, linux kernel, fedoraproject fedora +16 more +18 moreA use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls...CVE-2021-3752Fix available7.1 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3744Fix available5.5 Medium
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the libtpms code that may cause access beyond the boundary of internal...CVE-2021-3746Fix available6.5 Medium
- debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 moreA flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP...CVE-2021-3772Fix available6.5 Medium
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreA crafted NTFS image can cause a NULL pointer dereference in ntfs_extent_inode_open in NTFS-3G <...CVE-2021-39251Fix available7.8 High
- tuxera ntfs-3g, debian linux, fedoraproject fedora +1 more +3 moreModerate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement updateCVE-2021-33285Fix available7.8 High
- linux kernel, netapp active iq unified manager, bootstrap os +9 more +11 moreModerate: kernel-rt security and bug fix updateCVE-2021-3753Fix available4.7 Medium
- fedoraproject extra packages for enterprise linux, fedora, netapp hci compute node firmware +20 more +22 moreThere's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious...CVE-2021-3733Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +3 more +5 moreA use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when...CVE-2021-3748Fix available7.5 High
- python, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA flaw was found in python. An improperly handled HTTP response in the HTTP client code of python...CVE-2021-3737Fix availableEPSS 13.2%7.5 High
- squashfs-tools project squashfs-tools, debian linux, fedoraproject fedora +1 more +3 moresquashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry...CVE-2021-40153Fix available8.1 High
- libssh, debian linux, fedoraproject fedora +4 more +6 moreA flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two...CVE-2021-3634Fix available6.5 Medium
- redhat libvirt, debian linux, netapp ontap select deploy administration utility +1 more +3 moreAn improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It...CVE-2021-3667Fix available6.5 Medium
- kernel kvm, linux kernel, fedoraproject fedora +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3656Public exploitFix available8.8 High
- debian linux, linux kernel, redhat enterprise linux +2 moreA flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs...CVE-2021-3653Fix available8.8 High
- fedoraproject sssd, fedora, redhat enterprise linux +5 more +7 moreA flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via...CVE-2021-3621Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A...CVE-2021-3635Fix available4.4 Medium
- Show moreLoading…