Latest vulnerabilities for vendor "redhat"

7.8

Exploited

First published (updated )

CVE-2025-0678

CentOS Grub2-pc-modulesGrub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382)

7.8

First published (updated )

CVE-2024-45782

Red Hat Enterprise LinuxGrub2: fs/bfs: integer overflow in the bfs parser.

5.5

First published (updated )

CVE-2024-45778

Red Hat Enterprise LinuxXorg: xwayland: heap overflow in xkbwritekeysyms()

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26596

Red Hat Enterprise LinuxXorg: xwayland: buffer overflow in xkbchangetypesofkey()

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26597

Never miss a vulnerability like this again

Red Hat Enterprise LinuxXorg: xwayland: buffer overflow in xkbvmodmasktext()

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26595

Red Hat Enterprise LinuxXorg: xwayland: use-after-free in playreleasedevents()

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26600

Red Hat Enterprise LinuxXorg: xwayland: use of uninitialized pointer in compredirectwindow()

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26599

Red Hat Enterprise LinuxXorg: xwayland: out-of-bounds write in createpointerbarrierclient()

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26598

Red Hat Enterprise LinuxXorg: xwayland: use-after-free in syncinittrigger()

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26601

Never miss a vulnerability like this again

Red Hat Enterprise LinuxX.org: xwayland: use-after-free of the root cursor

7.8

EPSS

0.02%

First published (updated )

CVE-2025-26594

OpenSSHOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabled

6.8

Exploited

EPSS

8.93%

First published (updated )

CVE-2025-26465

MuttMutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block

5.3

EPSS

0.03%

First published (updated )

CVE-2024-49395

MuttMutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing

5.3

EPSS

0.03%

First published (updated )

CVE-2024-49394

MuttMutt: neomutt: to and cc email header fields are not protected by cryptographic signing

7.4

EPSS

0.02%

First published (updated )

CVE-2024-49393

Never miss a vulnerability like this again

maven/org.hornetq:hornetq-core-clientInfoleak, Path Traversal

critical

9.1

First published (updated )

CVE-2024-51127

Linux kernelparport: Proper fix for array out-of-bounds access

7.8

First published (updated )

CVE-2024-50074

Red Hat KeycloakWildfly: wildfly vulnerable to cross-site scripting (xss)

7.3

First published (updated )

CVE-2024-10234

Red Hat OpenShift Container PlatformGraphql: denial of service (dos) vulnerability via graphql batching

6.5

First published (updated )

CVE-2024-50311

Red Hat OpenShift Container PlatformGraphql: information disclosure via graphql introspection in openshift

5.3

First published (updated )

CVE-2024-50312

Never miss a vulnerability like this again

SUSE PAMPam: libpam: libpam vulnerable to read hashed password

4.7

First published (updated )

CVE-2024-10041

CVE-2024-10033Aap-gateway: xss on aap-gateway

6.1

First published (updated )

CVE-2024-10033

Red Hat QuayQuay: quay allows successful authentication with trucated version of the password

5.3

EPSS

0.05%

First published (updated )

CVE-2024-9683

Red Hat OpenShift Container PlatformPodman: buildah: cri-o: symlink traversal vulnerability in the containers/storage library can cause denial of service (dos)

6.5

EPSS

0.11%

First published (updated )

CVE-2024-9676

Red Hat OpenShift Container PlatformBuildah: buildah allows arbitrary directory mount

7.8

EPSS

0.04%

First published (updated )

CVE-2024-9675

Never miss a vulnerability like this again

Red Hat 3scale API Management PlatformSystem: pdf invoices of the developer users can be seen if the url is known

5.3

EPSS

0.04%

First published (updated )

CVE-2024-9671

Red Hat OpenShift Container PlatformPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library

8.2

EPSS

0.13%

First published (updated )

CVE-2024-9341

Red Hat Enterprise LinuxQemu-kvm: usb: assertion failure in usb_ep_get()

5.5

EPSS

0.04%

First published (updated )

CVE-2024-8354

Red Hat OpenShift Container PlatformKeycloak: vulnerable redirect uri validation results in open redirec

6.8

EPSS

0.24%

First published (updated )

CVE-2024-8883

Red Hat Enterprise LinuxLibopensc: heap buffer overflow in openpgp driver when generating key

low

2.9

EPSS

0.04%

First published (updated )

CVE-2024-8443

Never miss a vulnerability like this again