redhat

5,768 tracked vulnerabilities.

CVE-2016-5408 CRITICAL
Oracle Linux - Memory Corruption
Aug 10, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-5766 HIGH
GD Graphics Library <2.2.3 - DoS
Aug 07, 2016
CVSS 8.8
EPSS 0.07
CVE-2016-5392 MEDIUM
Red Hat OpenShift Enterprise 3.2 - Authenticated Exposure of Sensitive Information via Watch-Cache List
Aug 05, 2016
CVSS 6.5
EPSS 0.02
CVE-2016-4999 CRITICAL
Dashbuilder < 0.6.0.Beta1 - SQL Injection via Data Set Lookup Filter
Aug 05, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-3097 MEDIUM
Red Hat Satellite 5.7 - Stored Cross-Site Scripting via Group Name in Snapshot Data
Aug 05, 2016
CVSS 6.1
EPSS 0.01
CVE-2016-3080 MEDIUM
Red Hat Satellite 5.7 - Cross-Site Scripting via RHNMD User or Filesystem Parameters
Aug 05, 2016
CVSS 6.1
EPSS 0.01
CVE-2016-5403 MEDIUM
Canonical Ubuntu Linux < 2.6.0 - Denial of Service
Aug 02, 2016
CVSS 5.5
EPSS 0.01
CVE-2016-3737 CRITICAL
Red Hat JBoss Operations Network <3.3.6 - Code Injection
Aug 02, 2016
CVSS 9.8
EPSS 0.07
CVE-2016-5131 HIGH
Google Chrome < 52.0.2743.82 - Use After Free
Jul 23, 2016
CVSS 8.8
EPSS 0.02
CVE-2016-5444 LOW
Oracle MySQL <5.5.48, <5.6.29, <5.7.11 - Info Disclosure
Jul 21, 2016
CVSS 3.7
EPSS 0.04
CVE-2016-5440 MEDIUM
Oracle MySQL <5.5.49, <5.6.30, <5.7.12 - DoS
Jul 21, 2016
CVSS 4.9
EPSS 0.04
CVE-2016-3471 HIGH
Oracle MySQL <5.5.45 & <5.6.26 - Info Disclosure
Jul 21, 2016
CVSS 7.5
EPSS 0.00
CVE-2016-3452 LOW
Oracle MySQL <5.5.48, <5.6.29, <5.7.10 - Info Disclosure
Jul 21, 2016
CVSS 3.7
EPSS 0.04
CVE-2016-2775 MEDIUM
ISC BIND 9.x < 9.9.9-P2, 9.10.x < 9.10.4-P2, 9.11.x < 9.11.0b2 - Denial of Service via Lightweight Resolver Protocol
Jul 19, 2016
CVSS 5.9
EPSS 0.63
CVE-2016-5388 HIGH
Redhat Enterprise Linux Desktop < 7.5.5.0 - Improper Access Control
Jul 19, 2016
CVSS 8.1
EPSS 0.51
CVE-2016-5387 HIGH
Apache HTTP Server < 2.2.31 - Remote HTTP Traffic Redirection via HTTP_PROXY Header
Jul 19, 2016
CVSS 8.1
EPSS 0.56
CVE-2016-5386 HIGH
Fedora < 1.6.3 - Improper Access Control
Jul 19, 2016
CVSS 8.1
EPSS 0.05
CVE-2016-5385 HIGH
Oracle Communications User Data Repository < 5.09 - Open Redirect
Jul 19, 2016
CVSS 8.1
EPSS 0.50
CVE-2016-5008 CRITICAL
libvirt < 2.0.0 - Unauthenticated VNC Authentication Bypass via Empty Password
Jul 13, 2016
CVSS 9.8
EPSS 0.04
CVE-2016-5009 MEDIUM
Ceph < 0.94.6 - Authenticated Denial of Service via Crafted Prefix in Monitor Command Handler
Jul 12, 2016
CVSS 6.5
EPSS 0.02
CVE-2016-4985 HIGH
OpenStack Ironic < 4.2.5 and 5.x < 5.1.2 - Unauthenticated Sensitive Information Exposure via Vendor Passthru Request
Jul 12, 2016
CVSS 7.5
EPSS 0.03
CVE-2016-4428 MEDIUM
OpenStack Horizon < 8.0.1 and 9.0.0-9.0.1 - Authenticated Cross-Site Scripting via AngularJS Template Injection
Jul 12, 2016
CVSS 5.4
EPSS 0.02
CVE-2016-6170 MEDIUM
ISC BIND < 9.9.8, 9.10.x < 9.10.4-P1, 9.11.x < 9.11.0b1 - Denial of Service via Large AXFR/IXFR/UPDATE Responses
Jul 06, 2016
CVSS 6.5
EPSS 0.41
CVE-2016-2074 CRITICAL
Openvswitch - Memory Corruption
Jul 03, 2016
CVSS 9.8
EPSS 0.06
CVE-2016-1704 HIGH
Google Chrome < 51.0.2704.103 - Denial of Service
Jul 03, 2016
CVSS 8.8
EPSS 0.01
Products
enterprise_linux_desktop 1,928 enterprise_linux_server 1,891 enterprise_linux 1,857 enterprise_linux_workstation 1,845 enterprise_linux_server_aus 1,059 enterprise_linux_eus 784 enterprise_linux_server_tus 768 enterprise_linux_server_eus 622 openshift_container_platform 313 jboss_enterprise_application_platform 242 satellite 232 linux 229 openstack 210 enterprise_linux_hpc_node 146 openshift 146 software_collections 137 virtualization 128 enterprise_linux_for_ibm_z_systems 113 enterprise_linux_for_power_little_endian 107 single_sign-on 107 keycloak 98 enterprise_linux_for_power_little_endian_eus 94 enterprise_linux_for_ibm_z_systems_eus 88 enterprise_linux_workstation_supplementary 86 enterprise_linux_desktop_supplementary 84 enterprise_linux_server_supplementary 84 virtualization_host 84 enterprise_linux_server_supplementary_eus 83 enterprise_linux_hpc_node_eus 81 fedora_core 77
Quick Filters
Critical CVEs With Exploits In CISA KEV