Vulnerabilities in RED HAT
2,125 resultsVexday analysis
Red Hat apresenta footprint mínimo na base Vexday com apenas 1 CVE registrado, sem incidentes sob exploração ativa no momento. A vulnerabilidade identificada relaciona-se a deficiências em armazenamento de credenciais (CWE-522), mas não figura entre as críticas e permanece sem atividade recente de ataque.
CVE-2009-4139MEDIUMSpacewalk-java: spacewalk: red hat network satellite: spacewalk java: privilege escalation via cross-site request forgeryEPSS 0.8%CVE-2026-44191HIGHAnsible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settingsEPSS 0.8%CVE-2026-58011MEDIUMGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeEPSS 0.8%CVE-2024-5037HIGHOpenshift/telemeter: iss check during jwt authentication can be bypassedEPSS 0.8%CVE-2024-7923CRITICALPuppet-pulpcore: an authentication bypass vulnerability exists in pulpcoreEPSS 0.8%CVE-2023-47038HIGHPerl: write past buffer end via illegal user-defined unicode propertyEPSS 0.8%CVE-2026-72508CRITICALMulticloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)EPSS 0.8%CVE-2026-66793HIGHGovernance-policy-addon-controller: governance-policy-addon-controller: arbitrary container image override via managedclusteraddon annotation enables rce on spokeEPSS 0.8%CVE-2023-3971HIGHController: html injection in custom login infoEPSS 0.8%CVE-2023-6394HIGHQuarkus: graphql operations over websockets bypassEPSS 0.8%CVE-2026-79651HIGHKeycloak-services: keycloak-services: unauthenticated dos via unbounded locale cachingEPSS 0.8%CVE-2025-11561HIGHSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsEPSS 0.8%CVE-2026-58222HIGHSamba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributesEPSS 0.8%CVE-2023-5625MEDIUMPython-eventlet: patch regression for cve-2021-21419 in some red hat buildsEPSS 0.8%CVE-2026-84474CRITICALAutomation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host matchEPSS 0.8%CVE-2019-14854MEDIUMOpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to DebEPSS 0.8%CVE-2023-3628MEDIUMInfispan: rest bulk ops don't check permissionsEPSS 0.8%CVE-2026-96541HIGHGnome-remote-desktop: gnome-remote-desktop: unauthenticated rdp sockets lack a handshake deadlineEPSS 0.8%CVE-2026-89059HIGHResteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)EPSS 0.8%CVE-2026-93558HIGHIo.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of serviceEPSS 0.8%