Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Satellite
CRITICAL 9.0
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected a…
Enterprise Linux Desktop
CRITICAL 9.8
It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by sett…
Openstack
CRITICAL 9.8
The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially…
Enterprise Linux Desktop
CRITICAL 9.8
Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.
Enterprise Linux Desktop
CRITICAL 9.8
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to…
Satellite
CRITICAL 9.8
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use…
Ansible
CRITICAL 9.1
Ansible before version 2.2.0 fails to properly sanitize fact variables sent from the Ansible controller. An attacker with the ability to create speci…
Enterprise Linux Desktop
CRITICAL 9.8
A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. An attacker could cause a den…
Spacewalk
CRITICAL 9.8
It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorizati…
Jboss Enterprise Application Platform
CRITICAL 9.8
It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. An attacker could use thi…
Jboss Fuse
CRITICAL 9.0
It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored …
Openstack
CRITICAL 10.0
A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed…
Certification
CRITICAL 9.8
redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any fil…
Openshift Container Platform
CRITICAL 9.8
Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe. If an attacker could control the results of looku…
Jboss Enterprise Application Platform
CRITICAL 9.8
It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw …
Enterprise Virtualization Manager
CRITICAL 9.8
ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engine-backup was run with one of the option…
Enterprise Virtualization
CRITICAL 9.8
ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/Clou…
Richfaces
CRITICAL 9.8
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and exec…
Richfaces
CRITICAL 9.8
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java…
Openshift Container Platform
CRITICAL 9.8
openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certificate authentication to be disabl…
Enterprise Linux Desktop
CRITICAL 9.8
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and…
Enterprise Linux Aus
CRITICAL 9.8
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect va…
Enterprise Linux Desktop
CRITICAL 9.8
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through …
Enterprise Linux Desktop
CRITICAL 9.8
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from…
Enterprise Linux Desktop
CRITICAL 9.1
An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vu…
Enterprise Linux
CRITICAL 9.8
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for…
Enterprise Linux Desktop
CRITICAL 9.8
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, F…
Enterprise Linux
CRITICAL 9.8
An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental exten…
Enterprise Linux Desktop
CRITICAL 9.8
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory co…
Enterprise Linux Desktop
CRITICAL 9.8
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we pr…