Skip to contentRedhat vulnerabilities
Products
Show 140 moreShow less
Newest
- debian linux, linux kernel, fedoraproject fedora +19 more +21 moreKernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()CVE-2023-4004Fix available7.8 High
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: potential integer overflow in raw2tiff.cCVE-2023-41175Fix available6.5 Medium
- libtiff, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreLibtiff: integer overflow in tiffcp.cCVE-2023-40745Fix available6.5 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreKernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattrCVE-2023-3773Fix available5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +14 more +16 moreKernel: xfrm: null pointer dereference in xfrm_update_ae_params()CVE-2023-3772Fix available5.5 Medium
- red hat openstack platform 13 (queens) operational tools, openstack platform 16.1, openstack platform 16.2 +4 more +6 moreOpenstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277)CVE-2023-3637Fix available4.3 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user sp…CVE-2023-3640Public exploitFix available7.0 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_fragsCVE-2023-3812Fix available7.8 High
- redhat quay, red hat quay 3 +1 moreQuay: stored cross site scriptingCVE-2023-33845.4 Medium
- keylime, fedoraproject fedora, red hat enterprise linux 9 +7 more +9 moreKeylime: registrar is subject to a dos against ssl connectionsCVE-2023-38200Fix available7.5 High
- linux kernel, canonical ubuntu linux, red hat enterprise linux 6 +9 more +11 moreKernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to raceCVE-2023-3567Fix available7.1 High
- qemu, red hat enterprise linux 6, enterprise linux 7 +17 more +19 moreQemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()CVE-2023-3019Fix available6.0 Medium
- libtiff, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibtiff: memory leak in tiffcrop.cCVE-2023-3576Fix available5.5 Medium
- redhat libvirt, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreLibvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of serviceCVE-2023-3750Fix available6.5 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: spotlight server-side share path disclosureCVE-2023-34968Fix available5.3 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: type confusion in mdssvc rpc service for spotlightCVE-2023-34967Fix availableEPSS 61.2%5.3 Medium
- samba, debian linux, fedoraproject fedora +10 more +12 moreSamba: infinite loop in mdssvc rpc service for spotlightCVE-2023-34966Fix availableEPSS 62.4%7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 moreSamba: smb2 packet signing is not enforced when "server signing = required" is setCVE-2023-3347Fix available5.9 Medium
- samba, debian linux, fedoraproject fedora +9 more +11 moreSamba: out-of-bounds read in winbind auth_crapCVE-2022-2127Fix available5.9 Medium
- tats w3m, fedora extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in growbuf_to_str() at w3m/indep.cCVE-2023-38253Fix available4.7 Medium
- tats w3m, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreW3m: out of bounds read in strnew_size() at w3m/str.cCVE-2023-38252Fix available4.7 Medium
- libtiff, debian linux, fedora +5 more +7 moreSegmentation fault in fax3encode in libtiff/tif_fax3.cCVE-2023-3618Fix available6.5 Medium
- qemu, fedora extra packages for enterprise linux, fedora +8 more +10 moreImproper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceCVE-2023-3354Fix available7.5 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/formats_i.cCVE-2023-34432Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreHeap-buffer-overflow in src/hcom.cCVE-2023-34318Fix available7.8 High
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/voc.cCVE-2023-32627Fix available6.2 Medium
- fedora extra packages for enterprise linux, fedora, red hat enterprise linux 6 +3 more +5 moreFloating point exception in src/aiff.cCVE-2023-26590Fix available6.2 Medium
- tang project tang, fedora, red hat enterprise linux 7 +3 more +5 moreRace condition exists in the key generation and rotation functionalityCVE-2023-1672Fix available5.3 Medium
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips modeCVE-2023-3089Fix available7.0 High
- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreDistros-[dirtyvma] privilege escalation via non-rcu-protected vma traversalCVE-2023-3269Public exploitFix available7.8 High
- red hat build of quarkus 2.13.8.final, redhat build of quarkus +1 moreQuarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocolCVE-2023-2974Fix available6.5 Medium
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +5 more +7 moreKeycloak: oauth client impersonationCVE-2023-2422Fix available5.5 Medium
- keycloak, redhat openshift container platform, openshift container platform for ibm linuxone +2 more +4 moreKeycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDCCVE-2022-4361Public exploitFix available10.0 Critical
- red hat single sign-on 7, single sign-on 7.6 for rhel 7, single sign-on 7.6 for rhel 8 +7 more +9 moreKeycloak: client access via device auth request spoofCVE-2023-2585Fix available3.5 Low
- linux kernel, fedoraproject fedora, redhat enterprise linux +4 more +6 moreA hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6...CVE-2023-1206Public exploitFix available5.7 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreKernel: vmwgfx: double free within the handling of vmw_buffer_object objectsCVE-2023-33952Fix available6.7 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreKernel: vmwgfx: race condition leading to information disclosure vulnerabilityCVE-2023-33951Fix available6.7 Medium
- libreoffice, fedora, red hat enterprise linux 6 +4 more +6 moreArbitrary file writeCVE-2023-1183Fix availableEPSS 64.9%5.0 Medium
- debian linux, linux kernel, fedoraproject fedora +9 more +11 moreA NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs...CVE-2023-3212Fix available4.4 Medium
- the x11 project libx11, redhat enterprise linux +1 moreA vulnerability was found in libX11. The security flaw occurs because the functions in src...CVE-2023-3138Fix available7.5 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in the Framebuffer Console (fbcon) in the Linux Kernel. When providing font-...CVE-2023-3161Fix available5.5 Medium
- redhat advanced cluster management for kubernetes, redhat.com rhacm +1 moreThe grc-policy-propagator allows security escalation within the cluster. The propagator allows...CVE-2023-30277.8 High
- apple ipados, macos, safari +7 more +9 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...CVE-2023-32373In KEVFix availableEPSS 12.2%8.8 High
- opensc, redhat enterprise linux +1 moreA vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in...CVE-2023-2977Fix available7.1 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick. This security flaw causes a shell command injection...CVE-2023-34153Fix available7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick. This security flaw cause a remote code execution...CVE-2023-34152Public exploitFix available9.8 Critical
- imagemagick, debian linux, fedoraproject extra packages for enterprise linux +2 more +4 moreA vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of...CVE-2023-34151Fix available5.5 Medium
- openldap, apple macos, netapp active iq unified manager +11 more +13 moreA vulnerability was found in openldap. This security flaw causes a null pointer dereference in...CVE-2023-2953Fix available7.5 High
- keycloak, redhat build of quarkus, jboss a-mq +2 more +4 moreKeycloak Untrusted Certificate Validation vulnerabilityCVE-2023-1664Fix available6.5 Medium
- Show moreLoading…