RH
Product
Red Hat Discovery 2
108
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 10High 67Medium 27Low 4
Watch
Add Red Hat Discovery 2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-18477 | 4.4 | Aug 3 | Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape Affected: All versions, or not specified |
| CVE-2026-18508 | 4.4 | Aug 3 | Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite Affected: All versions, or not specified |
| CVE-2025-5278 | 4.4 | May 27 | Coreutils: heap buffer under-read in gnu coreutils sort via key specification Affected: All versions, or not specified |
| CVE-2025-9820 | 4.0 | Jan 26 | Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function Affected: All versions, or not specified |
| CVE-2026-5419 | 3.7 | Jun 1 | Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal Affected: All versions, or not specified |
| CVE-2026-3832 | 3.7 | Apr 30 | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response Affected: All versions, or not specified |
| CVE-2026-4519 | 3.3 | Mar 20 | webbrowser.open() allows leading dashes in URLs Affected: All versions, or not specified |
| CVE-2025-6170 | 2.5 | Jun 16 | Libxml2: stack buffer overflow in xmllint interactive shell command handling Affected: All versions, or not specified |