Red Hat CVEs
2,579 CVEs and advisories name Red Hat as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-14873In the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc/stdlib/mprec.c), Balloc is used to allocate a
- CVE-2019-19336A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8.
- CVE-2019-14872The _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory allocations without checking their return
- CVE-2019-19355An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk.
- CVE-2019-19351An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins.
- CVE-2019-19335During installation of an OpenShift 4 cluster, the `openshift-install` command line tool creates an `auth` directory, with `kubeconfig` and
- CVE-2019-14871The REENT_CHECK macro (see newlib/libc/include/sys/reent.h) as used by REENT_CHECK_TM, REENT_CHECK_MISC, REENT_CHECK_MP and other newlib mac
- CVE-2019-10146A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service
- CVE-2020-1720A flaw was found in PostgreSQL's "ALTER ...
- CVE-2020-1738A flaw was found in Ansible Engine when the module package or service is used and the parameter 'use' is not specified.
- CVE-2020-1740A flaw was found in Ansible Engine when using Ansible Vault for editing encrypted files.
- CVE-2020-1735A flaw was found in the Ansible Engine when the fetch module is used.
- CVE-2020-1736A flaw was found in Ansible Engine when a file is moved using atomic_move primitive as the file mode cannot be specified.
- CVE-2019-14887A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't ho
- CVE-2020-1753A security flaw was found in Ansible Engine, all Ansible 2.7.x versions prior to 2.7.17, all Ansible 2.8.x versions prior to 2.8.11 and all
- CVE-2020-1739A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of sv
- CVE-2020-1733A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivi
- CVE-2011-2487The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bl
- CVE-2020-1737A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the win_unzip mo
- CVE-2020-1706It has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1 up to, including 4.3, multiple containers
- CVE-2019-14886A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where encoded passwords are stored in errai_securit
- CVE-2020-1734A flaw was found in the pipe lookup plugin of ansible.
- CVE-2019-14893A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserializat
- CVE-2019-14892A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization
- CVE-2020-1731A flaw was found in all versions of the Keycloak operator, before version 8.0.2,(community only) where the operator generates a random admin
- CVE-2020-1693A flaw was found in Spacewalk up to version 2.9 where it was vulnerable to XML internal entity attacks via the /rpc/api endpoint.
- CVE-2020-1704An insecure modification vulnerability in the /etc/passwd file was found in all versions of OpenShift ServiceMesh (maistra) before 1.0.8 in
- CVE-2020-1711An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response
- CVE-2020-1697It was found in all keycloak versions before 9.0.0 that links to external applications (Application Links) in the admin console are not vali
- CVE-2020-1708It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple conta