Linux 13140
Google 12530
Microsoft 12379
Oracle 6737
Apple 6692
Adobe 6387
Ibm 6330
Cisco 5757
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Tuned
MEDIUM 5.5
tuned before 2.x allows local users to kill running processes due to insecure permissions with tuned's ktune service.
Openstack Mistral
MEDIUM 5.5
An information-exposure vulnerability was discovered where openstack-mistral's undercloud log files containing clear-text information were made world…
Jboss Operations Network
MEDIUM 6.5
In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON.
Frysk
HIGH 7.8
frysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an insecure RPATH set in the ELF header of multiple binarie…
Pagure
MEDIUM 6.1
Pagure: XSS possible in file attachment endpoint
Enterprise Linux
MEDIUM 5.5
The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace.
Directory Server
HIGH 7.5
The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointe…
Enterprise Linux
MEDIUM 5.9
Cache Poisoning issue exists in DNS Response Rate Limiting.
Rhq Mongo Db Drift Server
HIGH 7.1
An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.
Enterprise Linux
CRITICAL 9.8
The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code.
Enterprise Linux
HIGH 7.8
The extract_group_icon_cursor_resource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cau…
Enterprise Linux
HIGH 7.8
Integer overflow in the extract_group_icon_cursor_resource function in b/wrestool/extract.c in icoutils before 0.31.1 allows local users to cause a d…
Virtual Desktop Server Manager
MEDIUM 5.5
Insecure temporary file vulnerability in RedHat vsdm 4.9.6.
Jboss Aerogear
MEDIUM 6.1
JBoss AeroGear has reflected XSS via the password field
Cloudforms
MEDIUM 5.5
CloudForms stores user passwords in recoverable format
Update Infrastructure
MEDIUM 5.5
RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates
Enterprise Linux
HIGH 7.5
There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode. There was also a bug in …
Openshift
HIGH 7.3
cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp.
Cloudforms
MEDIUM 6.1
Multiple cross-site scripting (XSS) vulnerabilities in ManageIQ EVM allows remote attackers to inject arbitrary web script or HTML via unspecified ve…
Openstack
MEDIUM 5.9
HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL cert…
Icedtea6
CRITICAL 9.1
IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files.
Icedtea6
CRITICAL 9.1
IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services.
Jboss Operations Network
HIGH 8.0
A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON u…
Satellite
CRITICAL 9.1
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privil…
Enterprise Linux Desktop
MEDIUM 6.8
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7…
Keycloak
HIGH 7.5
A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. An authent…
Enterprise Linux
HIGH 7.4
A flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly tru…
Ansible Engine
MEDIUM 5.5
A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters mar…
Enterprise Linux
MEDIUM 5.3
Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 …
Ansible Engine
HIGH 7.8
In Ansible, all Ansible Engine versions up to ansible-engine 2.8.5, ansible-engine 2.7.13, ansible-engine 2.6.19, were logging at the DEBUG level whi…