Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 184

Export CSV
CVE-2016-5432

ovirt-engine: ovirt-engine-provisiondb logs contain DB username and password in plain text

The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Rhev Manager
CVE-2013-2192

hadoop: man-in-the-middle vulnerability

The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information by forcing a downgrade to simple authentication.

CVSS 2.0 · 3.2 Low EPSS 1.1% KEV · Not listed
Vendors
Apache Redhat
Products
Hadoop Jboss Amq Jboss Fuse and 1 more
CVE-2010-2793

spice activex/spicec named pipe races

Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.

CVSS 2.0 · 6.8 Medium EPSS 1.0% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager Spice-activex
CVE-2013-4353

openssl: client NULL dereference crash on malformed handshake packets

The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.

CVSS 2.0 · 4.3 Medium EPSS 11.9% KEV · Not listed
Vendors
Openssl Redhat
Products
Openssl Enterprise Linux Rhev Manager
CVE-2011-4316

SPICE screen locking race condition

Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users' desktop sessions via unspecified vectors.

CVSS 2.0 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2011-4516

jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file.

CVSS 2.0 · 6.8 Medium EPSS 10.5% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 7 more
CVE-2011-4517

jasper: heap buffer overflow flaws lead to arbitrary code execution (CERT VU#887409)

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file.

CVSS 2.0 · 6.8 Medium EPSS 10.5% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 4 more
Products
Ubuntu Linux Debian Linux Fedora and 8 more
CVE-2013-2151

rhevm: rhev agent service unquoted search path

Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2013-2152

rhevm: spice service unquoted search path

Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2013-2176

rhev-m: rhev-apt service unquoted search path

Unquoted Windows search path vulnerability in the Red Hat Enterprise Virtualization Application Provisioning Tool (RHEV-APT) in the rhev-guest-tools-iso package 3.2 allows local users to gain privileges via a Trojan horse application.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2013-4236

vdsm: incomplete fix for CVE-2013-0167 issue

VDSM in Red Hat Enterprise Virtualization 3 and 3.2 allows privileged guest users to cause the host to become "unavailable to the managment server" via invalid XML characters in a guest agent response. NOTE: this issue is due to an incomplete fix for CVE-2013-0167.

CVSS 2.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Rhev Manager
CVE-2013-4181

ovirt-engine: RedirectServlet cross-site scripting flaw

Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M), as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Rhev Manager
CVE-2011-5245

RESTEasy: XML eXternal Entity (XXE) flaw

The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE) injection attack, a similar vulnerability to CVE-2012-0818.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpms Jboss Brms Jboss Enterprise Application Platform and 6 more
CVE-2012-0860

rhev: vds_installer insecure /tmp use

Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.

CVSS 2.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Manager Rhev Manager
CVE-2012-0861

rhev: vds_installer is prone to MITM when downloading 2nd stage installer

The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when downloading deployUtil.py and vds_bootstrap.py, which prevents SSL certificates from being validated and allows remote attackers to execute arbitrary Python code via a man-in-the-middle attack.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Enterprise Virtualization Manager Rhev Manager
CVE-2012-2696

rhev: backend allows unprivileged queries

The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authenticated users to query arbitrary information via a (1) SOAP or (2) GWT request.

CVSS 2.0 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2012-4929

SSL/TLS CRIME attack against HTTPS

The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.

CVSS 2.0 · 2.6 Low EPSS 4.3% KEV · Not listed
Vendors
Debian Google Mozilla and 1 more
Products
Debian Linux Chrome Firefox and 2 more
CVE-2012-5516

rhev-m: MoveDisk ignores the disk's wipe-after-delete property

Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Virtualization Manager Rhev Manager
CVE-2012-5783

jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.

CVSS 3.0 · 3.7 Low EPSS 9.3% KEV · Not listed
Vendors
Apache Canonical Redhat
Products
Httpclient Ubuntu Linux Enterprise Linux and 9 more