Known vulnerabilities in Red Hat Virtualization - page 7

Vendor: Red Hat Inc.
Software: Red Hat Virtualization
Software CPE: cpe:2.3:a:red_hat:red_hat_virtualization:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 182
Public exploits: 38
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Virtualization Red Hat Virtualization is affected by 182 known vulnerabilities: 2 critical, 25 high, 44 medium, 111 low Critical High Medium Low

Vulnerabilities (182)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15559 - Improper Access Control
CVE-2018-1000805		 CWE-284 High
No
No
 - 24.10.2018 SB2018090720
SB2018102423
SB2018100403
and 14 more
#VU14412 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3646		 CWE-200 Low
No
No
 - 15.08.2018 SB2018081502
SB2018081505
SB2018081508
and 36 more
#VU14411 - Exposure of sensitive information to an unauthorized actor
CVE-2018-3620		 CWE-200 Low
No
No
 - 15.08.2018 SB2018081502
SB2018081506
SB2018081508
and 35 more
#VU14200 - Resource exhaustion
CVE-2018-5390		 CWE-400 Medium
No
No
 - 07.08.2018 SB2018080703
SB2018080704
SB2018080706
and 22 more
#VU14218 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-10897		 CWE-22 Low
No
No
 - 06.08.2018 SB2018080718
SB2018081001
SB2018090512
and 6 more
#VU14158 - Permissions, Privileges, and Access Controls
CVE-2018-10875		 CWE-264 Low
No
No
 - 01.08.2018 SB2018080113
SB2018073118
SB2019022302
and 11 more
#VU14157 - Permissions, Privileges, and Access Controls
CVE-2018-10874		 CWE-264 Low
No
No
 - 31.07.2018 SB2018080113
SB2018073118
SB2019011610
and 10 more
#VU13886 - Memory corruption
CVE-2018-10841		 CWE-119 Low
No
No
 - 16.07.2018 SB2018052427
SB2018062022
SB2018062023
and 1 more
#VU13542 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10855		 CWE-200 Low
No
No
 - 02.07.2018 SB2018062711
SB2018062712
SB2018071210
and 10 more
#VU13176 - Deserialization of Untrusted Data
CVE-2016-5003		 CWE-502 High
No
No
 - 04.06.2018 SB2016070803
SB2018053110
SB2018060506
and 7 more
#VU12992 - Buffer overflow
CVE-2018-1126		 CWE-120 High
Available
No
 - 23.05.2018 SB2018052212
SB2018052312
SB2018052315
and 20 more
#VU12977 - Integer overflow
CVE-2018-1124		 CWE-190 Low
Available
No
 - 22.05.2018 SB2018052212
SB2018052312
SB2018052315
and 23 more
#VU12911 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2018-3639		 CWE-362 Low
No
No
 - 22.05.2018 SB2018052201
SB2018052207
SB2018052208
and 142 more
#VU12803 - Information Exposure Through an Error Message
CVE-2018-1073		 CWE-209 Low
No
No
 - 17.05.2018 SB2018051725
#VU12802 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-12196		 CWE-300 Low
No
No
 - 17.05.2018 SB2018051725
SB2018031234
SB2025030774
#VU12743 - Command injection
CVE-2018-1111		 CWE-77 Low
Available
No
 - 16.05.2018 SB2018051602
SB2018051724
SB2018051726
and 12 more
#VU12520 - Improper Check or Handling of Exceptional Conditions
CVE-2018-1087		 CWE-703 Low
No
No
 - 10.05.2018 SB2018051002
SB2018051003
SB2018051004
and 10 more
#VU12450 - Improper Check or Handling of Exceptional Conditions
CVE-2018-8897		 CWE-703 Low
Available
Exploited
 - 08.05.2018 SB2018042501
SB2018050838
SB2018050839
and 31 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489		 CWE-502 High
No
No
 - 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 27 more
#VU10610 - Deserialization of Untrusted Data
CVE-2018-5968		 CWE-502 High
No
No
 - 16.02.2018 SB2018021604
SB2018021605
SB2018051725
and 13 more


Showing elements 121 - 140 out of 182