Vulnerabilidades em Red Hat

1.459 resultados
CVE-2019-14896HIGHA heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacEPSS 8.7%CVE-2019-3883MEDIUMIn 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will be waited by the worker for at most 'ioblocEPSS 8.4%CVE-2017-12171MEDIUMA regression was found in the Red Hat Enterprise Linux 6.9 version of httpd 2.2.15-60, causing comments in the "Allow" and "Deny" configuratEPSS 8.1%CVE-2019-14895HIGHA heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. ThEPSS 7.8%CVE-2023-3338MEDIUMCrash due to a null pointer dereference in the dn_nsp_send functionEPSS 7.0%CVE-2025-26465MEDIUMOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabledEPSS 7.0%CVE-2019-14867HIGHA flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way thEPSS 6.3%CVE-2026-1709CRITICALKeylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authenticationEPSS 5.8%CVE-2013-2060The download_from_url function in OpenShift Origin allows remote attackers to execute arbitrary commands via shell metacharacters in the URLEPSS 5.5%CVE-2019-14892HIGHA flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserializationEPSS 5.4%CVE-2020-1747CRITICALA vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it pEPSS 5.3%CVE-2023-46846CRITICALSquid: request/response smuggling in http/1.1 and icapEPSS 5.3%CVE-2023-5824HIGHSquid: dos against http and httpsEPSS 5.2%CVE-2023-40547HIGHShim: rce in http boot support may lead to secure boot bypassEPSS 4.9%CVE-2023-6246HIGHGlibc: heap-based buffer overflow in __vsyslog_internal()EPSS 4.8%CVE-2024-12088MEDIUMRsync: --safe-links option bypass leads to path traversalEPSS 4.6%CVE-2024-1635HIGHUndertow: out-of-memory error after several closed connections with wildfly-http-client protocolEPSS 4.6%CVE-2019-3900MEDIUMAn infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packetEPSS 4.4%CVE-2016-9579MEDIUMA flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the CORS policy was set to allow origin on a bucEPSS 4.4%CVE-2016-9597It was found that Red Hat JBoss Core Services erratum RHSA-2016:2957 for CVE-2016-3705 did not actually include the fix for the issue found EPSS 4.4%