← Back

Redhat

redhat

5,681 CVEs • 537 products

Products (537)

Click to collapse
Toggle
Linux
linux
Satellite
satellite
Openstack
openstack
Openshift
openshift
Keycloak
keycloak
Fedora Core
fedora_core
Libvirt
libvirt
Ansible Tower
ansible_tower
Cloudforms
cloudforms
Ansible
ansible
Ceph Storage
ceph_storage
Linux Desktop
linux_desktop
Linux Server
linux_server
Jboss Fuse
jboss_fuse
Undertow
undertow
Storage
storage
Quay
quay
Fuse
fuse
Data Grid
data_grid
Resteasy
resteasy
Wildfly
wildfly
Jboss A Mq
jboss_a-mq
Ceph
ceph

CVEs (5,681)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Adobe
OpensuseRedhat+1 more
8Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+5 more
May 6, 2026
Jun 16, 2016
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different...Show more
Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.Show less
4Canonical
DebianLibndp+1 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+7 more
May 6, 2026
Jun 13, 2016
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of s...Show more
libndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor Discovery Protocol (NDP) messages, which allows remote attackers to conduct man-in-the-middle attacks or cause a denial of service (network connectivity disruption) by advertising a node as a router from a non-local network.Show less
6Canonical
DebianMozilla+3 more
21Debian Linux
Enterprise Linux DesktopEnterprise Linux For Ibm Z Systems+18 more
May 6, 2026
Jun 13, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or...Show more
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.Show less
8Apple
HpMcafee+5 more
19Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Server Aus+16 more
May 6, 2026
Jun 9, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.
4Debian
OpensuseRedhat+1 more
11Debian Linux
Enterprise LinuxEnterprise Linux Desktop+8 more
May 6, 2026
Jun 9, 2016
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261.
4Debian
OpensuseRedhat+1 more
11Debian Linux
Enterprise LinuxEnterprise Linux Desktop+8 more
May 6, 2026
Jun 9, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-b...Show more
The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to connecting to a guest VM, which triggers a heap-based buffer overflow.Show less
1Redhat
1Openshift
May 6, 2026
Jun 8, 2016
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
Red Hat OpenShift Enterprise 3.2 does not properly restrict access to STI builds, which allows remote authenticated users to access the Docker socket and gain privileges via vectors related to build-pod.
1Redhat
2Openshift
Openshift Origin
May 6, 2026
Jun 8, 2016
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
HAproxy in Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allows local users to obtain the internal IP address of a pod by reading the "OPENSHIFT_[namespace]_SERVERID" cookie.
1Redhat
1Openshift
May 6, 2026
Jun 8, 2016
N/A· v4
7.1 HIGH· v3
5.5 MEDIUM· v2
Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network reso...Show more
Red Hat OpenShift Enterprise 3.2, when multi-tenant SDN is enabled and a build is run in a namespace that would normally be isolated from pods in other namespaces, allows remote authenticated users to access network resources on restricted pods via an s2i build with a builder image that (1) contains ONBUILD commands or (2) does not contain a tar binary.Show less
1Redhat
1Openshift
May 6, 2026
Jun 8, 2016
N/A· v4
5.3 MEDIUM· v3
3.5 LOW· v2
Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access A...Show more
Red Hat OpenShift Enterprise 3.2 and 3.1 do not properly validate the origin of a request when anonymous access is granted to a service/proxy or pod/proxy API for a specific pod, which allows remote attackers to access API credentials in the web browser localStorage via an access_token in the query parameter.Show less
1Redhat
2Openshift
Openshift Origin
May 6, 2026
Jun 8, 2016
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
1Redhat
1Openshift
May 6, 2026
Jun 8, 2016
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Red Hat OpenShift Enterprise 3.2 allows remote authenticated users to read log files from another namespace by using the same name as a previously deleted namespace when creating a new namespace.