redhat

5,618 tracked vulnerabilities.

CVE-2019-19066 MEDIUM
Linux Kernel < 5.3.11 - Denial of Service via Memory Leak in bfad_im_get_stats
Nov 18, 2019
CVSS 4.7
EPSS 0.00
CVE-2019-19062 MEDIUM
Linux Kernel < 5.3.11 - Memory Leak in crypto_report()
Nov 18, 2019
CVSS 4.7
EPSS 0.00
CVE-2019-19012 CRITICAL
Oniguruma <6.9.4_rc2 - Memory Corruption
Nov 17, 2019
CVSS 9.8
EPSS 0.15
CVE-2019-11135 MEDIUM
Opensuse Leap < 2.20 - Information Disclosure
Nov 14, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-0155 HIGH
Intel Graphics <26.20.100.6813 - Privilege Escalation
Nov 14, 2019
CVSS 7.8
EPSS 0.00
CVE-2019-14818 HIGH
DPDK 16.04-16.11.9, 17.0.0-17.11.7, 18.0.0-18.11.3, 19.0.0-19.08.0 - Use-After-Free via VRING_SET_NUM Messages
Nov 14, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-3866 MEDIUM
openstack-mistral - Information Exposure via World-Readable Undercloud Log Files
Nov 08, 2019
CVSS 5.5
EPSS 0.00
CVE-2019-14860 MEDIUM
Red Hat Fuse < 7.5.0 - Permissive Cross-domain Security Policy with Untrusted Domains
Nov 08, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-14824 MEDIUM
389 Directory Server - Unauthorized Attribute Disclosure via Deref Plugin
Nov 08, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-10222 HIGH
Ceph - Unauthenticated Denial of Service via HTTP Connection Termination
Nov 08, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-10219 MEDIUM
Hibernate Validator < 6.0.18 - Cross-Site Scripting via SafeHtml Validator Annotation
Nov 08, 2019
CVSS 6.1
EPSS 0.02
CVE-2019-18811 MEDIUM
Linux Kernel <5.3.9 - Memory Corruption
Nov 07, 2019
CVSS 5.5
EPSS 0.00
CVE-2019-18805 CRITICAL
Linux Kernel < 5.0.11 - Denial of Service via Integer Overflow in tcp_ack_update_rtt
Nov 07, 2019
CVSS 9.8
EPSS 0.01
CVE-2019-10223 MEDIUM
Kube-state-metrics <1.7.2 - Info Disclosure
Nov 05, 2019
CVSS 6.5
EPSS 0.01
CVE-2019-6470 MEDIUM
ISC DHCP < 4.4.1 - Denial of Service via DHCPv6 Mode with Modified BIND Library
Nov 01, 2019
CVSS 6.5
EPSS 0.00
CVE-2019-5010 HIGH
Python 2.7.0-2.7.15 - Denial of Service via X509 Certificate NULL Pointer Dereference
Oct 31, 2019
CVSS 7.5
EPSS 0.05
CVE-2019-0210 HIGH
Apache Thrift 0.9.3-0.12.0 - Out-of-bounds Read via Invalid JSON Input
Oct 29, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-0205 HIGH
Apache Thrift <= 0.12.0 - Denial of Service via Infinite Loop
Oct 29, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-11043 HIGH KEV
PHP 7.1.x < 7.1.33, 7.2.x < 7.2.24, 7.3.x < 7.3.11 - Remote Code Execution via FPM Buffer Overflow
Oct 28, 2019
CVSS 8.7
EPSS 0.94
CVE-2019-17596 HIGH
GO < 1.12.11 - Interpretation Conflict
Oct 24, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-17631 CRITICAL
Eclipse OpenJ9 0.15.0-0.16.0 - Unauthenticated Improper Privilege Management
Oct 17, 2019
CVSS 9.1
EPSS 0.00
CVE-2019-14287 HIGH NUCLEI
Sudo <1.8.28 - Privilege Escalation
Oct 17, 2019
CVSS 8.8
EPSS 0.86
CVE-2019-11253 HIGH NUCLEI
Kubernetes v1.0-1.12 and < v1.13.12, v1.14.8, v1.15.5, v1.16.2 - Denial of Service via Malicious YAML/JSON Payloads
Oct 17, 2019
CVSS 7.5
EPSS 0.86
CVE-2019-2999 MEDIUM
Oracle JDK 7u231, 8u221, 11.0.4 and 13 - Unauthenticated Data Manipulation and Information Disclosure via Javadoc
Oct 16, 2019
CVSS 4.7
EPSS 0.01
CVE-2019-2996 MEDIUM
Oracle Java SE <8u221 - Info Disclosure
Oct 16, 2019
CVSS 4.2
EPSS 0.02
Products
enterprise_linux_desktop 1,928 enterprise_linux_server 1,891 enterprise_linux_workstation 1,845 enterprise_linux 1,780 enterprise_linux_server_aus 1,059 enterprise_linux_eus 780 enterprise_linux_server_tus 768 enterprise_linux_server_eus 622 openshift_container_platform 291 jboss_enterprise_application_platform 243 linux 229 satellite 222 openstack 210 enterprise_linux_hpc_node 146 openshift 146 software_collections 137 virtualization 128 enterprise_linux_for_ibm_z_systems 112 single_sign-on 108 enterprise_linux_for_power_little_endian 106 keycloak 98 enterprise_linux_for_power_little_endian_eus 93 enterprise_linux_for_ibm_z_systems_eus 87 enterprise_linux_workstation_supplementary 86 enterprise_linux_desktop_supplementary 84 enterprise_linux_server_supplementary 84 virtualization_host 84 enterprise_linux_server_supplementary_eus 83 enterprise_linux_hpc_node_eus 81 fedora_core 77
Quick Filters
Critical CVEs With Exploits In CISA KEV