redhat

5,768 tracked vulnerabilities.

CVE-2018-3665 MEDIUM
Intel Core i3 - Unauthorized Data Exposure via Lazy FP State Restore Side Channel
Jun 21, 2018
CVSS 5.6
EPSS 0.01
CVE-2018-1120 LOW
Linux Kernel < 4.17 - Denial of Service via FUSE mmap and /proc Read Blocking
Jun 20, 2018
CVSS 2.8
EPSS 0.07
CVE-2018-1117 MEDIUM
ovirt-ansible-roles <1.0.6 - Info Disclosure
Jun 20, 2018
CVSS 5.0
EPSS 0.01
CVE-2018-1073 MEDIUM
ovirt-engine < 4.2.3 - User Enumeration via Web Console Login Error Messages
Jun 19, 2018
CVSS 5.3
EPSS 0.02
CVE-2018-1061 MEDIUM
Python < 2.7.15 - Denial of Service via Catastrophic Backtracking in difflib.IS_LINE_JUNK
Jun 19, 2018
CVSS 6.5
EPSS 0.05
CVE-2018-1333 HIGH
Apache HTTP Server 2.4.18-2.4.30,2.4.33 - Denial of Service via HTTP/2 Request Handling
Jun 18, 2018
CVSS 7.5
EPSS 0.17
CVE-2018-1090 MEDIUM
Pulp < 2.16.2 - Unauthorized Exposure of Sensitive Information via Task Override Config
Jun 18, 2018
CVSS 5.5
EPSS 0.01
CVE-2018-1060 HIGH
Python < 2.7.15 - Denial of Service via Catastrophic Backtracking in pop3lib apop()
Jun 18, 2018
CVSS 7.5
EPSS 0.05
CVE-2018-12533 CRITICAL
JBoss RichFaces 3.1.0-3.3.4 - Unauthenticated Expression Language Injection via Paint2DResource ImageData Path
Jun 18, 2018
CVSS 9.8
EPSS 0.21
CVE-2018-12532 CRITICAL
JBoss RichFaces 4.5.3-4.5.17 - Unauthenticated Expression Language Injection via MediaOutputResource
Jun 18, 2018
CVSS 9.8
EPSS 0.07
CVE-2018-11219 CRITICAL
Redis < 3.2.12, 4.x < 4.0.10, 5.x < 5.0 RC2 - Integer Overflow in Lua Struct Library
Jun 17, 2018
CVSS 9.8
EPSS 0.07
CVE-2018-11218 CRITICAL
Redis < 3.2.12, 4.x < 4.0.10, 5.x < 5.0 RC2 - Memory Corruption via Lua cmsgpack Library
Jun 17, 2018
CVSS 9.8
EPSS 0.59
CVE-2018-1085 CRITICAL
OpenShift Container Platform < 3.9.31 - Improper Authentication via Misconfigured etcd.conf
Jun 15, 2018
CVSS 9.0
EPSS 0.02
CVE-2018-0495 MEDIUM
Libgcrypt < 1.7.10 and 1.8.x < 1.8.3 - ECDSA Key Discovery via Memory-Cache Side-Channel Attack
Jun 13, 2018
CVSS 4.7
EPSS 0.01
CVE-2018-10850 MEDIUM
389 Directory Server < 1.4.0.10 - Denial of Service via Persistent Search Race Condition
Jun 13, 2018
CVSS 5.9
EPSS 0.02
CVE-2018-11806 HIGH
Qemu < 2.12.1 - Heap-Based Buffer Overflow via Fragmented Datagram Handling
Jun 13, 2018
CVSS 8.2
EPSS 0.01
CVE-2018-5848 HIGH
Android - Buffer Overflow in wmi_set_ie() Function
Jun 12, 2018
CVSS 7.8
EPSS 0.00
CVE-2018-5803 MEDIUM
Linux Kernel < 4.15.8 DoS via SCTP Packet Length Handling
Jun 12, 2018
CVSS 5.5
EPSS 0.01
CVE-2018-1103 MEDIUM
Openshift Enterprise <1.1.10 - Code Injection
Jun 12, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-1070 MEDIUM
OpenShift Container Platform < 3.10 - Denial of Service via Routing Configuration
Jun 12, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-5185 MEDIUM
Thunderbird <52.8 - Info Disclosure
Jun 11, 2018
CVSS 6.5
EPSS 0.02
CVE-2018-5184 HIGH
Thunderbird <52.8 - Info Disclosure
Jun 11, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-5183 CRITICAL
Mozilla - Memory Corruption
Jun 11, 2018
CVSS 9.8
EPSS 0.03
CVE-2018-5178 HIGH
Thunderbird ESR < 52.8 - Buffer Overflow
Jun 11, 2018
CVSS 8.1
EPSS 0.05
CVE-2018-5170 MEDIUM
Thunderbird <52.8 - Info Disclosure
Jun 11, 2018
CVSS 4.3
EPSS 0.02
Products
enterprise_linux_desktop 1,928 enterprise_linux_server 1,891 enterprise_linux 1,857 enterprise_linux_workstation 1,845 enterprise_linux_server_aus 1,059 enterprise_linux_eus 784 enterprise_linux_server_tus 768 enterprise_linux_server_eus 622 openshift_container_platform 313 jboss_enterprise_application_platform 242 satellite 232 linux 229 openstack 210 enterprise_linux_hpc_node 146 openshift 146 software_collections 137 virtualization 128 enterprise_linux_for_ibm_z_systems 113 enterprise_linux_for_power_little_endian 107 single_sign-on 107 keycloak 98 enterprise_linux_for_power_little_endian_eus 94 enterprise_linux_for_ibm_z_systems_eus 88 enterprise_linux_workstation_supplementary 86 enterprise_linux_desktop_supplementary 84 enterprise_linux_server_supplementary 84 virtualization_host 84 enterprise_linux_server_supplementary_eus 83 enterprise_linux_hpc_node_eus 81 fedora_core 77
Quick Filters
Critical CVEs With Exploits In CISA KEV