İçeriğe atla
Noroxi

redhat kayıtları

redhat üreticisine ait 6.164 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
97 · %1,6
Silahlaştırılmış
150 · %2,4
Pre-auth RCE
572
Düzeltme kaydı olan
%82,4
Yayından KEV’e ortanca
2108 gün

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

6.164 kayıt
  • CVE-2014-6271
    99Hemen

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    gnu · bash24 Eyl 2014

  • CVE-2013-2251
    99Hemen

    Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    apache · archiva19 Tem 2013

  • CVE-2012-1823
    99Hemen

    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle que

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    php · php11 May 2012

  • CVE-2015-3113
    99Hemen

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    adobe · flash player23 Haz 2015

  • CVE-2014-7169
    99Hemen

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    gnu · bash24 Eyl 2014

  • CVE-2015-1427
    99Hemen

    The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection me

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    elastic · elasticsearch17 Şub 2015

  • CVE-2014-0497
    99Hemen

    Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 1

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    adobe · flash player5 Şub 2014

  • CVE-2019-11043
    99Hemen

    Underflow in PHP-FPM can lead to RCE

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    php · php28 Eki 2019

  • CVE-2015-5119
    99Hemen

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    adobe · flash player8 Tem 2015

  • CVE-2012-4681
    99Hemen

    Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    oracle · jdk27 Ağu 2012

  • CVE-2019-7609
    99Hemen

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %95

    elastic · kibana25 Mar 2019

  • CVE-2018-1000861
    98Hemen

    A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler/cor

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    jenkins · jenkins10 Ara 2018

  • CVE-2019-5544
    98Hemen

    OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    openslp · openslp6 Ara 2019

  • CVE-2019-1003030
    98Hemen

    A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/wo

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %97

    jenkins · pipeline\8 Mar 2019

  • CVE-2011-3544
    98Hemen

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remot

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    oracle · jdk19 Eki 2011

  • CVE-2016-4117
    97Hemen

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wil

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    adobe · flash player10 May 2016

  • CVE-2015-5122
    97Hemen

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    adobe · flash player14 Tem 2015

  • CVE-2012-1723
    97Hemen

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %94

    oracle · jdk16 Haz 2012

  • CVE-2016-4437
    97Hemen

    Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbit

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93

    apache · aurora7 Haz 2016

  • CVE-2016-3427
    97Hemen

    Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to aff

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %92

    oracle · jdk21 Nis 2016

  • CVE-2021-40438
    96Hemen

    A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user.

    KritikCVSS 9,0KEVSilahlaştırılmışEPSS %100

    resf · rocky linux16 Eyl 2021

  • CVE-2017-12149
    96Hemen

    In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOn

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %91

    redhat · jboss enterprise application platform4 Eki 2017

  • CVE-2016-8735
    96Hemen

    Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %90

    apache · tomcat6 Nis 2017

  • CVE-2017-12617
    92Hemen

    When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %100

    apache · tomcat3 Eki 2017

  • CVE-2017-12615
    92Hemen

    When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g.

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %100

    apache · tomcat19 Eyl 2017