redhat

5,618 tracked vulnerabilities.

CVE-2021-3744 MEDIUM
Linux Kernel < 5.15 - Use-After-Free in ccp_run_aes_gcm_cmd
Mar 04, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-23214 HIGH
PostgreSQL Certificate Authentication - SQL Injection via MITM
Mar 04, 2022
CVSS 8.1
EPSS 0.00
CVE-2021-3762 CRITICAL
Clair 0.4.6-0.4.7 - Path Traversal and Arbitrary File Write
Mar 03, 2022
CVSS 9.8
EPSS 0.09
CVE-2021-3620 MEDIUM
Ansible < 2.9.27 - Sensitive Information Disclosure in Error Messages
Mar 03, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-3609 HIGH
Linux Kernel 2.6.25-4.4.276 - Local Privilege Escalation via CAN BCM Race Condition
Mar 03, 2022
CVSS 7.0
EPSS 0.00
CVE-2021-3602 MEDIUM
Buildah < 1.16.8 - Information Disclosure via Chroot Isolation
Mar 03, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-3772 MEDIUM
Linux Kernel < 5.15.0 - Denial of Service via Spoofed SCTP Chunks
Mar 02, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-3716 LOW
nbdkit 1.11.8-1.24.6 - Denial of Service via STARTTLS Plaintext Injection
Mar 02, 2022
CVSS 3.1
EPSS 0.00
CVE-2021-3677 MEDIUM
PostgreSQL 11.0-11.12 - Authenticated Exposure of Sensitive Information via Crafted Query
Mar 02, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-3667 MEDIUM
libvirt 4.1.0-7.4.0 - Denial of Service via Improper Locking in virStoragePoolLookupByTargetPath
Mar 02, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-3654 MEDIUM NUCLEI
OpenStack Nova < 21.2.3 - Open Redirect via noVNC Console Proxy
Mar 02, 2022
CVSS 6.1
EPSS 0.87
CVE-2021-3631 MEDIUM
libvirt < 7.5.0 - Incorrect Permission Assignment for Critical Resource via SELinux MCS Category Pair Generation
Mar 02, 2022
CVSS 6.3
EPSS 0.00
CVE-2021-3623 MEDIUM
libtpms < 0.6.5 - Out-of-bounds Write via TPM 2 Command Packet Processing
Mar 02, 2022
CVSS 6.1
EPSS 0.00
CVE-2021-3700 MEDIUM
usbredir < 0.11.0 - Use-After-Free in usbredirparser_serialize()
Feb 24, 2022
CVSS 6.4
EPSS 0.00
CVE-2021-3610 HIGH
ImageMagick < 7.0.11-14 - Heap-Based Buffer Overflow in ReadTIFFImage
Feb 24, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-3596 MEDIUM
ImageMagick <7.0.10-31 - NULL Pointer Dereference
Feb 24, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-26252 HIGH
htmldoc 1.9.12 - Heap Buffer Overflow in pspdf_prepare_page
Feb 24, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-4115 MEDIUM
polkit - Unauthenticated Denial of Service via File Descriptor Exhaustion
Feb 21, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-44141 MEDIUM
Samba < 4.15.5 - Unauthenticated Exposure of Sensitive Information via SMB1 Symlink
Feb 21, 2022
CVSS 4.3
EPSS 0.00
CVE-2021-44142 HIGH
Samba < 4.13.17 - Out-of-bounds Read and Write via Extended File Attributes
Feb 21, 2022
CVSS 8.8
EPSS 0.36
CVE-2021-4093 HIGH
Linux Kernel 5.11-5.14.15 - Out-of-bounds Read and Write via SEV-ES String I/O VMGEXIT
Feb 18, 2022
CVSS 8.8
EPSS 0.00
CVE-2021-4091 HIGH
389-ds-base - Double Free in Virtual Attributes Context Handling
Feb 18, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-3948 MEDIUM
mig-controller - Incorrect Default Permissions via Cluster Namespace Handling
Feb 18, 2022
CVSS 6.3
EPSS 0.00
CVE-2021-3930 MEDIUM
QEMU < 6.2.0 - Denial of Service via SCSI MODE SELECT Command
Feb 18, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-3657 CRITICAL
isync < 1.4.4 - Remote Code Execution via Large IMAP Literal Handling
Feb 18, 2022
CVSS 9.8
EPSS 0.06
Products
enterprise_linux_desktop 1,928 enterprise_linux_server 1,891 enterprise_linux_workstation 1,845 enterprise_linux 1,780 enterprise_linux_server_aus 1,059 enterprise_linux_eus 780 enterprise_linux_server_tus 768 enterprise_linux_server_eus 622 openshift_container_platform 291 jboss_enterprise_application_platform 243 linux 229 satellite 222 openstack 210 enterprise_linux_hpc_node 146 openshift 146 software_collections 137 virtualization 128 enterprise_linux_for_ibm_z_systems 112 single_sign-on 108 enterprise_linux_for_power_little_endian 106 keycloak 98 enterprise_linux_for_power_little_endian_eus 93 enterprise_linux_for_ibm_z_systems_eus 87 enterprise_linux_workstation_supplementary 86 enterprise_linux_desktop_supplementary 84 enterprise_linux_server_supplementary 84 virtualization_host 84 enterprise_linux_server_supplementary_eus 83 enterprise_linux_hpc_node_eus 81 fedora_core 77
Quick Filters
Critical CVEs With Exploits In CISA KEV