Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 184

Export CSV
CVE-2014-7187

bash: off-by-one error in deeply nested flow control constructs

Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the "word_lineno" issue.

CVSS 2.0 · 10.0 Critical EPSS 58.5% KEV · Not listed
Vendors
Gnu Redhat
Products
Bash Enterprise Linux Rhel Els and 4 more
CVE-2014-7186

bash: parser can allow out-of-bounds memory access while handling redir_stack

The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the "redir_stack" issue.

CVSS 2.0 · 10.0 Critical EPSS 64.3% KEV · Not listed
Vendors
Gnu Redhat
Products
Bash Enterprise Linux Rhel Els and 4 more
CVE-2014-3577

CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix

org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "CN=" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the "foo,CN=www.apache.org" string in the O field.

CVSS 3.0 · 4.8 Medium EPSS 9.2% KEV · Not listed
Vendors
Apache Redhat
Products
Httpasyncclient Httpclient Enterprise Linux and 15 more
CVE-2014-3573

Engine: XML eXternal Entity (XXE) flaw in backend module

The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted XML/RSDL document, related to an XML External Entity (XXE) issue.

CVSS 2.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2014-3561

ovirt-engine-log-collector: database password disclosed in process listing

The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users to obtain sensitive information by listing the processes.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2014-3559

ovirt-engine-backend: memory snapshots not wiped when deleting a VM with wipe-after-delete (WAD) enabled for its disks

The oVirt storage backend in Red Hat Enterprise Virtualization 3.4 does not wipe memory snapshots when deleting a VM, even when wipe-after-delete (WAD) is configured for the VM's disk, which allows remote authenticated users with certain credentials to read portions of the deleted VM's memory and obtain sensitive information via an uninitialized storage volume.

CVSS 2.0 · 3.5 Low EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2014-3511

openssl: TLS protocol downgrade attack

The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a "protocol downgrade" issue.

CVSS 2.0 · 4.3 Medium EPSS 14.1% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Rhev Manager and 1 more
CVE-2014-3509

openssl: race condition in ssl_parse_serverhello_tlsext

Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.

CVSS 2.0 · 6.8 Medium EPSS 12.9% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Rhev Manager and 1 more
CVE-2014-3485

ovirt-engine-api: XML eXternal Entity (XXE) flaw

The REST API in the ovirt-engine in oVirt, as used in Red Hat Enterprise Virtualization (rhevm) 3.4, allows remote authenticated users to read arbitrary files and have other unspecified impact via unknown vectors, related to an XML External Entity (XXE) issue.

CVSS 2.0 · 4.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2014-1568

nss: RSA PKCS#1 signature verification forgery flaw (MFSA 2014-73)

Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a "signature malleability" issue.

CVSS 2.0 · 7.5 High EPSS 16.7% KEV · Not listed
Vendors
Apple Google Microsoft and 2 more
Products
Mac Os X Chrome Chrome Os and 11 more
CVE-2014-0202

ovirt-engine-dwh: setup script logs database password in cleartext

The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse (rhevm-dwh) package before 3.3.3, stores the history database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhev Manager Rhevm-dwh
CVE-2014-0201

ovirt-engine-reports: various configuration files are world-readable

ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package (rhevm-reports) before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhev Manager Rhevm-reports
CVE-2014-0200

ovirt-engine-reports: js-jboss7-ds.xml is world-readable

The Red Hat Enterprise Virtualization Manager reports (rhevm-reports) package before 3.3.3-1 uses world-readable permissions on the datasource configuration file (js-jboss7-ds.xml), which allows local users to obtain sensitive information by reading the file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhev Manager Rhevm-reports
CVE-2014-0199

ovirt-engine-reports: setup script logs database password in cleartext

The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports (rhevm-reports) package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Rhev Manager Rhevm-reports
CVE-2012-6153

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix

http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5783.

CVSS 2.0 · 4.3 Medium EPSS 5.8% KEV · Not listed
Vendors
Apache Redhat
Products
Commons-httpclient Developer Toolset Jboss Bpms and 10 more
CVE-2014-0154

ovirt-engine-webadmin: HttpOnly flag is not included when the session ID is set

oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt Rhev Manager
CVE-2016-5432

ovirt-engine: ovirt-engine-provisiondb logs contain DB username and password in plain text

The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Rhev Manager
CVE-2014-0153

ovirt-engine-api: session ID stored in HTML5 local storage

The REST API in oVirt 3.4.0 and earlier stores session IDs in HTML5 local storage, which allows remote attackers to obtain sensitive information via a crafted web page.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Ovirt Redhat
Products
Ovirt Rhev Manager
CVE-2016-4443

org.ovirt.engine-root: engine-setup logs contained information for extracting admin password

Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager