Vulnerabilities > Redhat > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-07-18 CVE-2018-2973 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE).
network
high complexity
oracle redhat netapp hp
5.9
5.9
2018-07-18 CVE-2018-2940 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).
network
low complexity
oracle hp redhat netapp
4.3
4.3
2018-07-16 CVE-2018-10840 Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4_xattr_set_entry() function.
low complexity
linux canonical redhat
6.6
6.6
2018-07-16 CVE-2017-15137 Unspecified vulnerability in Redhat Openshift and Openshift Container Platform
The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example.
network
low complexity
redhat
5.3
5.3
2018-07-16 CVE-2017-2638 Improper Authentication vulnerability in multiple products
It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints.
network
low complexity
infinispan redhat CWE-287
6.5
6.5
2018-07-10 CVE-2018-3693 Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis. 5.6
5.6
2018-07-10 CVE-2018-10872 Unspecified vulnerability in Redhat products
A flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch operation via Mov SS or Pop SS instructions.
local
low complexity
redhat
5.5
5.5
2018-07-10 CVE-2018-1129 Improper Authentication vulnerability in multiple products
A flaw was found in the way signature calculation was handled by cephx authentication protocol.
low complexity
redhat ceph debian opensuse CWE-287
6.5
6.5
2018-07-09 CVE-2018-5001 Out-of-bounds Read vulnerability in multiple products
Adobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability.
network
low complexity
adobe redhat CWE-125
6.5
6.5
2018-07-09 CVE-2018-5000 Integer Overflow or Wraparound vulnerability in multiple products
Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability.
network
low complexity
adobe redhat CWE-190
6.5
6.5