Known vulnerabilities in Red Hat Enterprise Linux for Power 9

Vendor: Red Hat Inc.

Software: Red Hat Enterprise Linux for Power

Version: 9

Software CPE: cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_power:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 384

Public exploits: 38

Known exploited (KEV): 4

Vulnerabilities by Severity

Vulnerabilities (384)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU21142 - Improper Certificate Validation CVE-2019-0223	CWE-295	Low	No	No	-	17.09.2019	SB2019042311 SB2019091704 SB2019091705 and 8 more
#VU20502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-10152	CWE-22	Low	No	No	-	02.09.2019	SB2019090205 SB2019072917 SB2019061011 and 3 more
#VU20501 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2018-15664	CWE-22	Low	No	No	-	02.09.2019	SB2019090205 SB2019062523 SB2019072507 and 3 more
#VU20192 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8323	CWE-79	Low	No	No	-	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 10 more
#VU20191 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8322	CWE-79	Low	No	No	-	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 10 more
#VU20190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8325	CWE-79	Low	No	No	-	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 10 more
#VU20189 - Improper Control of Generation of Code ('Code Injection') CVE-2019-8324	CWE-94	Medium	No	No	-	13.08.2019	SB2019081320 SB2019061706 SB2019072108 and 11 more
#VU20071 - Improper input validation CVE-2019-10160	CWE-20	Low	No	No	-	13.08.2019	SB2019081309 SB2019081310 SB2019062005 and 20 more
#VU20063 - Resource Management Errors CVE-2019-3883	CWE-399	Low	No	No	-	13.08.2019	SB2019081305 SB2019041711 SB2019072915 and 1 more
#VU9734 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2017-7829	CWE-451	Low	No	No	-	25.12.2017	SB2017122209 SB2017122602 SB2017122603 and 3 more
#VU9733 - Improper input validation CVE-2017-7848	CWE-20	Low	No	No	-	25.12.2017	SB2017122209 SB2017122602 SB2017122603 and 3 more
#VU9732 - Missing release of memory after effective lifetime CVE-2017-7847	CWE-401	Low	No	No	-	25.12.2017	SB2017122209 SB2017122602 SB2017122603 and 3 more
#VU9731 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-7846	CWE-79	Low	No	No	-	25.12.2017	SB2017122209 SB2017122602 SB2017122603 and 3 more
#VU9616 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2017-15097	CWE-362	Low	No	No	-	12.12.2017	SB2017121205 SB2017120817 SB2017120824 and 2 more
#VU9477 - Exposure of sensitive information to an unauthorized actor CVE-2017-12613	CWE-200	Medium	No	No	-	30.11.2017	SB2017113015 SB2017102712 SB2017120608 and 16 more
#VU9373 - Missing release of memory after effective lifetime CVE-2017-15275	CWE-401	Medium	No	No	-	21.11.2017	SB2017112101 SB2017112111 SB2017112123 and 14 more
#VU9372 - Use After Free CVE-2017-14746	CWE-416	Medium	No	No	-	21.11.2017	SB2017112101 SB2017112111 SB2017112123 and 13 more
#VU9375 - Heap-based Buffer Overflow CVE-2017-16844	CWE-122	High	No	No	-	21.11.2017	SB2017112102 SB2017112103 SB2017112104 and 4 more
#VU9169 - Permissions, Privileges, and Access Controls CVE-2017-12172	CWE-264	Low	No	No	-	10.11.2017	SB2017111005 SB2017120609 SB2017120610 and 4 more
#VU8917 - Buffer over-read CVE-2017-1000257	CWE-126	Low	No	No	-	24.10.2017	SB2017102401 SB2017102402 SB2017102403 and 13 more

Showing elements 1 - 20 out of 384

Known vulnerabilities in Red Hat Enterprise Linux for Power 9

Vulnerabilities by Severity

Vulnerabilities (384)

Please verify you're human