redhat

5,768 tracked vulnerabilities.

CVE-2014-4967 CRITICAL
Ansible < 1.6.7 - Remote Code Execution via Crafted Fact Argument Injection
Feb 18, 2020
CVSS 9.8
EPSS 0.04
CVE-2014-4966 CRITICAL
Ansible < 1.6.7 - Remote Code Execution via Crafted Jinja2 Template Injection
Feb 18, 2020
CVSS 9.8
EPSS 0.04
CVE-2014-8089 CRITICAL
Zend Framework < 1.12.9, 2.2.x < 2.2.8, 2.3.x < 2.3.3 - SQL Injection via Null Byte
Feb 17, 2020
CVSS 9.8
EPSS 0.03
CVE-2014-0234 CRITICAL
Red Hat OpenShift Enterprise <2.1 - RCE
Feb 12, 2020
CVSS 9.8
EPSS 0.04
CVE-2014-8141 HIGH
Info-ZIP UnZip < 6.0 - Heap-based Buffer Overflow via Crafted Zip File
Jan 31, 2020
CVSS 7.8
EPSS 0.07
CVE-2014-8140 HIGH
unzip < 6.0 - Remote Code Execution via Crafted Zip File in -t Command Argument
Jan 31, 2020
CVSS 7.8
EPSS 0.07
CVE-2014-8139 HIGH
Info-ZIP UnZip < 6.0 - Remote Code Execution via CRC32 Verification Heap Overflow
Jan 31, 2020
CVSS 7.8
EPSS 0.07
CVE-2014-7844 HIGH
Red Hat Enterprise Linux - Remote Code Execution via Crafted Email Address
Jan 14, 2020
CVSS 7.8
EPSS 0.02
CVE-2014-2686 HIGH
Ansible < 1.5.4 - Always-Incorrect Control Flow Implementation
Jan 09, 2020
CVSS 7.5
EPSS 0.01
CVE-2014-3590 MEDIUM
Red Hat Satellite 6 - Cross-Site Request Forgery in Logout Action
Jan 02, 2020
CVSS 6.5
EPSS 0.01
CVE-2014-0245 MEDIUM
JBoss Portal <6.2.0 - Info Disclosure
Jan 02, 2020
CVSS 5.9
EPSS 0.01
CVE-2014-0183 MEDIUM
Red Hat Subscription Asset Manager 1.4 - Cross-Site Scripting via Systems Name Registration
Jan 02, 2020
CVSS 6.1
EPSS 0.01
CVE-2014-0169 MEDIUM
JBoss Enterprise Application Platform 6 - Incorrect Authorization via Shared Security Domain Cache
Jan 02, 2020
CVSS 6.5
EPSS 0.01
CVE-2014-3701 HIGH
eDeploy - Race Condition via Temporary File Handling
Dec 15, 2019
CVSS 8.1
EPSS 0.01
CVE-2014-3699 CRITICAL
eDeploy - Remote Code Execution via cPickle Deserialization
Dec 15, 2019
CVSS 9.8
EPSS 0.02
CVE-2014-3652 MEDIUM
Keycloak < 1.1.0.Beta1 - Open Redirect via Unvalidated Redirect URL
Dec 15, 2019
CVSS 6.1
EPSS 0.01
CVE-2014-3536 MEDIUM
CloudForms Management Engine 5 - Sensitive Information Exposure via Log File
Dec 15, 2019
CVSS 5.5
EPSS 0.00
CVE-2014-0241 MEDIUM
rubygem-hammer_cli_foreman - Info Disclosure
Dec 13, 2019
CVSS 5.5
EPSS 0.00
CVE-2014-0197 HIGH
Red Hat CloudForms Management Engine 5.0-5.9.3.1 - Cross-Site Request Forgery via Permissive Referrer Header Check
Dec 13, 2019
CVSS 8.8
EPSS 0.01
CVE-2014-0175 CRITICAL
marionette_collective - Use of Hard-coded Credentials
Dec 13, 2019
CVSS 9.8
EPSS 0.02
CVE-2014-0163 HIGH
OpenShift - OS Command Injection
Dec 11, 2019
CVSS 8.8
EPSS 0.02
CVE-2014-0026 MEDIUM
Red Hat Subscription Asset Manager - Cross-Site Request Forgery in REST API
Dec 11, 2019
CVSS 6.5
EPSS 0.00
CVE-2014-3656 MEDIUM
JBoss KeyCloak - Cross-Site Scripting in login-status-iframe.html
Dec 10, 2019
CVSS 6.1
EPSS 0.01
CVE-2014-3585 CRITICAL
redhat-upgrade-tool - Improper Verification of Cryptographic Signature
Nov 22, 2019
CVSS 9.8
EPSS 0.01
CVE-2014-3700 CRITICAL
eDeploy - Remote Code Execution via Untrusted Data in eval()
Nov 21, 2019
CVSS 9.8
EPSS 0.03
Products
enterprise_linux_desktop 1,928 enterprise_linux_server 1,891 enterprise_linux 1,857 enterprise_linux_workstation 1,845 enterprise_linux_server_aus 1,059 enterprise_linux_eus 784 enterprise_linux_server_tus 768 enterprise_linux_server_eus 622 openshift_container_platform 313 jboss_enterprise_application_platform 242 satellite 232 linux 229 openstack 210 enterprise_linux_hpc_node 146 openshift 146 software_collections 137 virtualization 128 enterprise_linux_for_ibm_z_systems 113 enterprise_linux_for_power_little_endian 107 single_sign-on 107 keycloak 98 enterprise_linux_for_power_little_endian_eus 94 enterprise_linux_for_ibm_z_systems_eus 88 enterprise_linux_workstation_supplementary 86 enterprise_linux_desktop_supplementary 84 enterprise_linux_server_supplementary 84 virtualization_host 84 enterprise_linux_server_supplementary_eus 83 enterprise_linux_hpc_node_eus 81 fedora_core 77
Quick Filters
Critical CVEs With Exploits In CISA KEV