Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Enterprise Linux
HIGH 7.8
Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committ…
Jboss Enterprise Application Platform
CRITICAL 9.8
In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessF…
Enterprise Linux Desktop
CRITICAL 9.8
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafte…
Mobile Application Platform
CRITICAL 9.8
A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as we…
Mobile Application Platform
MEDIUM 6.3
The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the netwo…
Mobile Application Platform
MEDIUM 6.1
It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored X…
Enterprise Virtualization Manager
CRITICAL 9.1
redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows remote authenticated users with the Supe…
Amq
HIGH 8.8
Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ.
Amq
HIGH 7.5
Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ.
Amq
HIGH 7.5
Console: CORS headers set to allow all in Red Hat AMQ.
Jboss A Mq
MEDIUM 5.4
The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript.
Feedhenry Enterprise Mobile Application Platform
MEDIUM 6.5
Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform.
Jboss Enterprise Application Platform
MEDIUM 5.9
AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1 allows attackers to obtain sensitive information via vect…
Enterprise Linux
MEDIUM 5.5
The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local …
Edeploy
CRITICAL 9.8
eDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP to download files.
Pagure
HIGH 7.5
Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization
Jboss Enterprise Application Platform
HIGH 7.5
Red Hat JBoss EAP version 3.0.7 through before 4.0.0.Beta1 is vulnerable to a server-side cache poisoning or CORS requests in the JAX-RS component re…
Rhnsd
MEDIUM 5.5
It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes.
Satellite
MEDIUM 6.5
Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.
Satellite
MEDIUM 6.1
Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.
Satellite
MEDIUM 6.1
Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
Enterprise Virtualization Manager
MEDIUM 5.9
Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot protocol" is set to None, which m…
Enterprise Virtualization
MEDIUM 5.5
oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
Jboss Enterprise Application Platform
MEDIUM 5.3
Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.
Enterprise Linux
HIGH 8.8
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF files. Successful exploitation c…
Enterprise Linux
HIGH 7.4
Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redi…
Enterprise Linux
HIGH 7.0
Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted …
Ovirt Engine
MEDIUM 6.1
Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.
Enterprise Linux Desktop
MEDIUM 5.5
The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.
Jboss Wildfly Application Server
HIGH 7.5
The Undertow module of WildFly 9.x before 9.0.0.CR2 and 10.x before 10.0.0.Alpha1 allows remote attackers to obtain the source code of a JSP page via…