Read the docs

Red Hat

Records7414All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical793CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9

Exploited now

Red Hat records in CISA KEV
TI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability Priority CRITICAL 93KEV 2026-10-28TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability Priority CRITICAL 86KEV 2026-09-02TI-2015-02874 Red Hat Libuser Race Condition Vulnerability Priority CRITICAL 92KEV 2026-08-26TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Priority CRITICAL 90KEV 2026-08-04

Components

Products in the NVD configurations · select one to filter the records
Enterprise Linux 1956 records CRITICAL Enterprise Linux Desktop 1928 records CRITICAL Enterprise Linux Server 1891 records CRITICAL Enterprise Linux Workstation 1845 records CRITICAL Enterprise Linux Server Aus 1061 records CRITICAL Enterprise Linux Eus 796 records CRITICAL Enterprise Linux Server Tus 770 records CRITICAL Enterprise Linux Server Eus 622 records CRITICAL

Records

21 records in Build Of Quarkus · all components

TI-2022-03763 CVE-2022-4116 · GHSA-g56w-cwg4-hxx9

Injection in quarkus

Priority HIGH 67

A vulnerability was found in quarkus.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.32516 Published 2022-11-22 Fixed in 2.14.2.Final, 2.13.5.Final CWE-74
TI-2023-04469 CVE-2023-4853 · GHSA-4f4r-wgv2-jjvg

Quarkus: http security policy bypass

Priority MEDIUM 40

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02276 Published 2023-09-20 Partial fix · 1.9.2-3.el8, 2.13.8.Final-redhat-00005 +9 CWE-148
TI-2022-04106 CVE-2022-4492 · GHSA-pfcc-3g6r-8rg8

Server-side request forgery in undertow

Priority MEDIUM 40

The undertow client is not checking the server identity presented by the server certificate in https connections.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00596 Published 2023-02-23 Partial fix · 2.3.5.Final, 2.2.24.Final CWE-918
TI-2022-00910 CVE-2022-1011 · GHSA-8x5v-3jgc-w6jf

Use after free in kernel

Priority LOW 36

A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write().

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01169 Published 2022-03-18 Partial fix CWE-416
TI-2021-03514 CVE-2021-20218 · GHSA-jwh2-ffg4-48xc

Path traversal in fabric8-kubernetes-client

Priority LOW 35

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.01312 Published 2021-03-16 Partial fix · 4.7.2, 4.11.2 +2 CWE-22
TI-2019-11104 CVE-2019-14900 · GHSA-8grg-q944-cch5

SQL injection in Hibernate

Priority LOW 33

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02126 Published 2020-07-06 Partial fix · 5.3.18, 5.4.18 +1 CWE-89
TI-2021-02555 CVE-2021-3609 · GHSA-rv9w-mxpp-hwhj

Race condition in kernel

Priority LOW 31

.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00431 Published 2022-03-03 Partial fix CWE-362
TI-2021-03045 CVE-2021-4178 · GHSA-98g7-rxmf-rrxm

Deserialization of untrusted data in kubernetes-client

Priority LOW 30

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00335 Published 2022-08-24 Partial fix · 5.0.3, 5.1.2 +5 CWE-502
TI-2023-00041 CVE-2023-0044 · GHSA-c57v-hc7m-8px2

Cross-site scripting in quarkus-vertx-http

Priority LOW 28

If the Quarkus Form Authentication session cookie Path attribute is set to `/` then a cross-site attack may be initiated which might lead to the Information Disclosure.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0055 Published 2023-02-23 Fixed in 2.13.7.Final CWE-79
TI-2021-02823 CVE-2021-3914 · GHSA-pvc3-wvxr-7cmf

Cross-site scripting in smallrye-health

Priority LOW 28

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00523 Published 2022-08-25 Fixed in 3.1.2 CWE-79
TI-2021-02677 CVE-2021-3744

Memory leak in kernel

Priority LOW 26

A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00533 Published 2022-03-04 Partial fix CWE-401
TI-2021-02587 CVE-2021-3642 · GHSA-5499-qjvh-6j7w

Observable discrepancy in wildfly-elytron

Priority LOW 26

A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00846 Published 2021-08-05 Partial fix · 1.10.14, 1.15.5 +1 CWE-203
TI-2021-02490 CVE-2021-3536 · GHSA-v2wx-jj66-2hp7

Cross-site scripting in wildfly

Priority LOW 23

A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00533 Published 2021-05-20 Partial fix · 23.0.2.Final CWE-79
Open these records in search →