← Back

Redhat

redhat

5,674 CVEs • 537 products

Products (537)

Click to collapse
Toggle
Linux
linux
Satellite
satellite
Openstack
openstack
Openshift
openshift
Keycloak
keycloak
Fedora Core
fedora_core
Libvirt
libvirt
Ansible Tower
ansible_tower
Cloudforms
cloudforms
Ansible
ansible
Ceph Storage
ceph_storage
Linux Desktop
linux_desktop
Linux Server
linux_server
Jboss Fuse
jboss_fuse
Undertow
undertow
Storage
storage
Quay
quay
Fuse
fuse
Data Grid
data_grid
Resteasy
resteasy
Wildfly
wildfly
Jboss A Mq
jboss_a-mq
Ceph
ceph

CVEs (5,674)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
5Canonical
DebianMariadb+2 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Locking.Show less
5Canonical
DebianMariadb+2 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors.
5Canonical
DebianMariadb+2 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
3.3 LOW· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect integrity via unknown vectors related to...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect integrity via unknown vectors related to InnoDB.Show less
5Canonical
DebianMariadb+2 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.Show less
3Hp
OracleRedhat
10Enterprise Linux Desktop Supplementary
Enterprise Linux Hpc Node SupplementaryEnterprise Linux Server Supplementary+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect availability via unknown vectors related to JavaFX.
5Canonical
DebianMariadb+2 more
10Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
2.6 LOW· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error H...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling.Show less
3Hp
OracleRedhat
10Enterprise Linux Desktop Supplementary
Enterprise Linux Hpc Node SupplementaryEnterprise Linux Server Supplementary+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
5.1 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE...Show more
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.Show less
3Hp
OracleRedhat
9Enterprise Linux Desktop Supplementary
Enterprise Linux Hpc Node SupplementaryEnterprise Linux Server Supplementary+6 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
3Hp
OracleRedhat
10Enterprise Linux Desktop Supplementary
Enterprise Linux Hpc Node SupplementaryEnterprise Linux Server Supplementary+7 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.
5Canonical
DebianMariadb+2 more
7Debian Linux
Enterprise Linux DesktopEnterprise Linux Server+4 more
Apr 29, 2026
Jan 15, 2014
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.
1Redhat
2Cloudforms Management Engine
Manageiq Enterprise Virtualization Manager
Apr 29, 2026
Jan 11, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute...Show more
SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the profile[] parameter in an explorer action.Show less
1Redhat
1Libvirt
Apr 29, 2026
Jan 7, 2014
N/A· v4
N/A· v3
2.1 LOW· v2
The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of serv...Show more
The lxcDomainGetMemoryParameters method in lxc/lxc_driver.c in libvirt 1.0.5 through 1.2.0 does not properly check the status of LXC guests when reading memory tunables, which allows local users to cause a denial of service (NULL pointer dereference and libvirtd crash) via a guest in the shutdown status, as demonstrated by the "virsh memtune" command.Show less
2Phusion
Redhat
2Openshift
Passenger
Apr 29, 2026
Jan 3, 2014
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary "config" file in a directory...Show more
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem.Show less
2Redhat
Xen
4Enterprise Linux Desktop
Enterprise Linux ServerEnterprise Linux Workstation+1 more
Apr 29, 2026
Dec 27, 2013
N/A· v4
N/A· v3
5.5 MEDIUM· v2
Xen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP), allows guest users to cause a denial of service (invalid pointer dereference and hypervisor crash) via the SAHF instruction.
1Redhat
1Enterprise Virtualization Hypervisor
Apr 29, 2026
Dec 27, 2013
N/A· v4
N/A· v3
7.4 HIGH· v2
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memo...Show more
libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings.Show less
1Redhat
1Jboss Operations Network
Apr 29, 2026
Dec 24, 2013
N/A· v4
N/A· v3
2.1 LOW· v2
Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration files, which allows local users to obtain authentication credentials and other unspecified sensitive i...Show more
Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration files, which allows local users to obtain authentication credentials and other unspecified sensitive information by reading these files.Show less
1Redhat
1Jboss Enterprise Portal Platform
Apr 29, 2026
Dec 23, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
1Redhat
1Subscription Asset Manager
Apr 29, 2026
Dec 23, 2013
N/A· v4
N/A· v3
9.3 HIGH· v2
Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vectors.
1Redhat
1Enterprise Mrg
Apr 29, 2026
Dec 23, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to execute arbitrary SQL commands via vectors related to the "filtering table operator."
1Redhat
1Enterprise Mrg
Apr 29, 2026
Dec 23, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" f...Show more
Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the "Max allowance" field in the "Set limit" form.Show less