Read the docs

Red Hat

Records7413All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical792CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Priority CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records
Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

25 records in 389 Directory Server · all components

TI-2026-07965 CVE-2026-9064 · GHSA-7r3c-wfgh-x96c

Resource allocation without limits in 389-ds-base

Priority MEDIUM 40

A flaw was found in 389-ds-base.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00815 Published 2026-05-20 Partial fix · 8060020260609102432.0ca98e7e, 8080020260610130252.f969626e +15 CWE-770
TI-2022-01808 CVE-2022-1949 · GHSA-x847-vxvj-g6rj

Authorization bypass in 389-ds-base

Priority LOW 36

An access control bypass vulnerability found in 389-ds-base.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01525 Published 2022-06-01 Will not fix CWE-639
TI-2010-02131 CVE-2010-2222 · GHSA-r732-c3fc-99gm

NULL pointer dereference in Red Hat Directory Server

Priority LOW 36

The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted search query.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01349 Published 2019-11-05 No fix listed CWE-476
TI-2018-07747 CVE-2018-10935 · GHSA-f8xp-r7x3-274c

Uncontrolled resource consumption in Red Hat 389-ds-base

Priority LOW 33

A flaw was found in the 389 Directory Server that allows users to cause a crash in the LDAP server using ldapsearch with server side sort.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01847 Published 2018-09-11 Fixed CWE-400
TI-2022-00895 CVE-2022-0996 · GHSA-w87j-439w-p9f3

Improper authentication in 389-ds-base

Priority LOW 32

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01531 Published 2022-03-23 Partial fix CWE-287
TI-2021-02473 CVE-2021-3514 · GHSA-4mjm-c95j-8748

NULL pointer dereference in 389-ds-base

Priority LOW 31

When using a sync_repl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.012 Published 2021-05-28 Partial fix CWE-476
TI-2020-18037 CVE-2020-35518 · GHSA-vg4h-9m5m-rchq

Information disclosure in 389-ds-base

Priority LOW 27

When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01538 Published 2021-03-26 Partial fix CWE-200
TI-2026-12603 CVE-2026-14969 · GHSA-9458-4323-hx4r

389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption

Priority LOW 19

A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and 3DES-CBC operations, allowing an attacker with privileged filesystem access to det…

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00106 Published 2026-07-07 Fix deferred CWE-329
Open these records in search →