Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how redhat compares to other vendors in security performance

View Risk Score →

Software

redhat enterprise linux
68
redhat enterprise linux desktop
45
redhat linux
39
redhat enterprise linux server
25
redhat enterprise linux workstation
23
redhat enterprise linux eus
20
redhat enterprise linux server aus
16
redhat fedora core
15
redhat enterprise linux server tus
12
redhat enterprise linux server eus
6
redhat linux advanced workstation
5
redhat satellite
5
redhat build of keycloak
4
redhat directory server
4
redhat automatic bug reporting tool
3
redhat jboss enterprise application platform
3
redhat libvirt
3
redhat openshift
3
redhat openshift container platform
3
redhat rhevm-reports
3
redhat ansible automation platform
2
redhat conga
2
redhat enterprise linux aus
2
redhat jboss fuse
2
redhat jboss operations network
2
redhat keycloak
2
redhat single sign-on
2
redhat spice-xpi
2
redhat ansible tower
1
redhat dtach
1
redhat enterprise linux for ibm z systems
1
redhat enterprise linux for power big endian
1
redhat enterprise linux for real time
1
redhat enterprise linux for real time for nfv tus
1
redhat enterprise linux for real time tus
1
redhat enterprise linux for scientific computing
1
redhat enterprise linux hpc node
1
redhat enterprise linux server from rhui
1
redhat enterprise mrg
1
redhat enterprise virtualization
1
redhat enterprise virtualization hypervisor
1
redhat enterprise virtualization manager
1
redhat hardened images
1
redhat icedtea6
1
redhat jboss a-mq
1
redhat jboss core services
1
redhat jboss enterprise application platform expansion pack
1
redhat jboss enterprise brms platform
1
redhat jboss enterprise web platform
1
redhat kdebase
1

Keycloak KeycloakOrg.keycloak.protocol.oidc.grants: org.keycloak.services.managers: keycloak: server-side request forgery via oidc token endpoint manipulation

Risk 13
Severity
3.1
EPSS
0.02%
First published (updated )
CVE-2026-4874

Red Hat KeycloakKeycloak: keycloak: user enumeration via differential error messages

Risk 15
Severity
3.7
EPSS
0.04%
First published (updated )
CVE-2026-4633

redhat Build Of KeycloakOrg.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint

Risk 12
Severity
2.7
EPSS
0.01%
First published (updated )
CVE-2026-3911

redhat Enterprise LinuxGnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

Risk 21
Severity
3.7
First published (updated )
CVE-2026-3832

libssh libsshLibssh: libssh: denial of service due to malformed sftp message

Risk 37
Severity
3.1
First published (updated )
CVE-2026-0968
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

libssh libsshLibssh: libssh: denial of service via improper configuration file handling

Risk 18
Severity
3.3
First published (updated )
CVE-2026-0965

redhat Build Of KeycloakOrg.keycloak/keycloak-services: webauthn attestation statement verification bypass

Risk 17
Severity
3.1
First published (updated )
CVE-2025-12150

redhat Enterprise LinuxNetavark: podman: netavark may resolve hostnames to unexpected hosts

Risk 15
Severity
3.7
EPSS
0.04%
First published (updated )
CVE-2025-8283

Red Hat AnsibleAap: aap-gateway: automation-hub: sensitive information disclosure

Risk 19
Severity
3.5
First published (updated )
CVE-2025-53862

Ansible AnsibleAap: sensitive cookie(s) set without security flags

Risk 17
Severity
3.1
First published (updated )
CVE-2025-53861
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

GdkPixbuf GdkPixbufGdk-pixbuf: uninitialized memory disclosure in gdkpixbuf gif lzw decoder

Risk 13
Severity
3.3
EPSS
0.02%
First published (updated )
CVE-2025-6199

redhat Enterprise LinuxLibxml2: stack buffer overflow in xmllint interactive shell command handling

Risk 12
Severity
2.5
EPSS
0.01%
First published (updated )
CVE-2025-6170

Red Hat KeycloakKeycloak-core: keycloak environment information

Risk 12
Severity
2.7
EPSS
0.03%
First published (updated )
CVE-2025-5416

redhat Enterprise LinuxLibopensc: heap buffer overflow in openpgp driver when generating key

Risk 16
Severity
2.9
EPSS
0.04%
First published (updated )
CVE-2024-8443

redhat Enterprise LinuxLibopensc: uninitialized values after incorrect check or usage of apdu response values in libopensc

Risk 31
Severity
3.9
First published (updated )
CVE-2024-45616
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxLibopensc: pkcs15init: usage of uninitialized values in libopensc and pkcs15init

Risk 31
Severity
3.9
First published (updated )
CVE-2024-45615

redhat Enterprise LinuxLibopensc: uninitialized values after incorrect or missing checking return values of functions in libopensc

Risk 31
Severity
3.9
First published (updated )
CVE-2024-45617

redhat Enterprise LinuxLibopensc: uninitialized values after incorrect or missing checking return values of functions in pkcs15init

Risk 31
Severity
3.9
First published (updated )
CVE-2024-45618

Fedoraproject FedoraOpensc: memory use after free in authentic driver when updating token info

Risk 23
Severity
3.4
First published (updated )
CVE-2024-1454

redhat Enterprise LinuxGrub2: grub2-set-bootflag can be abused by local (pseudo-)users

Risk 19
Severity
3.3
First published (updated )
CVE-2024-1048
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

redhat Enterprise LinuxPackagekitd: use-after-free in idle function callback

Risk 13
Severity
3.3
EPSS
0.04%
First published (updated )
CVE-2024-0217

redhat Enterprise LinuxA vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicio…

Risk 18
Severity
3.3
First published (updated )
CVE-2023-2602

redhat Enterprise LinuxLast updated 25 April 2025

Risk 18
Severity
3.3
First published (updated )
CVE-2023-1513

redhat Openstackhttps://wiki.openstack.org/wiki/OSSN/OSSN-0090

Risk 16
Severity
2.8
First published (updated )
CVE-2022-4134

redhat/rh-sso7-keycloakInput Validation

Risk 27
Severity
3.8
First published (updated )
CVE-2023-0091
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

IBM Robotic Process Automation for Cloud PakIBM Robotic Process Automation for Cloud Pak information disclosure

Risk 18
Severity
3.3
First published (updated )
CVE-2022-42442

redhat/rh-sso7-keycloakXSS

Risk 27
Severity
3.8
First published (updated )
CVE-2022-2256

Packagekit Project PackagekitInfoleak

Risk 18
Severity
3.3
First published (updated )
CVE-2022-0987

redhat Enterprise LinuxNull Pointer Dereference

Risk 18
Severity
3.3
First published (updated )
CVE-2021-4217

redhat Enterprise LinuxInfoleak

Risk 18
Severity
3.3
First published (updated )
CVE-2021-3923
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203