Vulnerabilidades de Red Hat
CVEs publicadas que afetam produtos de Red Hat: 1605 registro(s), com severidade, exploração e correções.
Red Hat Enterprise Linux 9 657Red Hat Enterprise Linux 10 597Red Hat Enterprise Linux 8 594Enterprise Linux 362Red Hat Enterprise Linux 7 331Red Hat OpenShift Container Platform 4 210Hardened Images 173Build Of Keycloak 158Red Hat Enterprise Linux 9.6 Extended Update Support 148Red Hat Enterprise Linux 10.0 Extended Update Support 147Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 142Red Hat Enterprise Linux 8.8 Telecommunications Update Service 134Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 134Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 128Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 123Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 116Red Hat Enterprise Linux 6 115Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 109Openshift Container Platform 103Enterprise Linux Server 101Red Hat Enterprise Linux 7 Extended Lifecycle Support 101Enterprise Linux Workstation 98Enterprise Linux Desktop 96Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 92Red Hat build of Keycloak 26.4 86Enterprise Linux Server Aus 75Enterprise Linux Eus 74Red Hat build of Keycloak 26.6 67Red Hat OpenShift AI 3.4 62Red Hat OpenShift Container Platform 4.16 59Red Hat OpenShift Container Platform 4.18 59Red Hat OpenShift Container Platform 4.17 56Red Hat Enterprise Linux 9.4 Extended Update Support 55Red Hat Update Infrastructure 5 54Red Hat OpenShift Container Platform 4.14 53Enterprise Linux Server Tus 52Red Hat Single Sign-On 7 52Red Hat OpenShift Container Platform 4.13 50Red Hat OpenShift Container Platform 4.19 50Red Hat OpenShift Container Platform 4.15 49
CVE-2011-3389
Média · 4.3
Exploit público CWE-326 06/09/2011
Inadequate Encryption Strength em Google Chrome
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.
CVE-2010-3904
Alta · 7.8
KEV Urgente · 76 Exploit público CWE-1284 06/12/2010
Linux Kernel Improper Input Validation Vulnerability
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
CVE-2010-1871
Alta · 8.8
KEV Urgente · 76 Exploit público CWE-917 05/08/2010
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
CVE-2010-0738
Média · 5.3
KEV Urgente · 83 Exploit público Ransomware CWE-749 28/04/2010
Red Hat JBoss Authentication Bypass Vulnerability
The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.
CVE-2010-1428
Alta · 7.5
KEV Urgente · 78 Exploit público Ransomware CWE-749 28/04/2010
Red Hat JBoss Information Disclosure Vulnerability
The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.