RedHat vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 201910
3. 20192
4. 20191
5. 20191
6. 20201

Newest CVEs

• CVE-2015-5201

  VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x before 6-6.7-20151117.0 as packaged in…

  RedHat · Enterprise Virtualization Hypervisor (aka RHEV-H)

  High7.5
• CVE-2019-19341

  A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2, where files in '/var/backup/tower' are left world-readable. These files include both the…

  RedHat · Tower

  Medium5.9
• CVE-2019-10172

  A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus…

  Redhat · jackson-mapper-asl

  Medium5.9
• CVE-2013-4280

  Insecure temporary file vulnerability in RedHat vsdm 4.9.6.

  RedHat · vdsm

  Medium5.5
• CVE-2018-5742

  An oversight while backporting a feature leads to an assertion failure in buffer.c:420

  RedHat · BIND9

  Medium5.9
• CVE-2019-3834

  It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON). This flaw allows attackers to manipulate ClassLoader…

  RedHat · struts

  Medium5.6
• CVE-2019-10212

  A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the…

  RedHat · undertow

  Medium4.8
• CVE-2019-10202

  A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525,…

  RedHat · codehaus

  High8.1
• CVE-2019-10176

  A flaw was found in OpenShift Container Platform, versions 3.11 and later, in which the CSRF tokens used in the cluster console component were found to remain…

  RedHat · atomic-openshift

  Medium4.2
• CVE-2019-10171

  It was found that the fix for CVE-2018-14648 in 389-ds-base, versions 1.4.0.x before 1.4.0.17, was incorrectly applied in RHEL 7.5. An attacker would still be…

  RedHat · 389-ds-base

  High7.5