Red Hat Enterprise Virtualization (RHEV) 3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:enterprise_virtualization:3.0:*:*:*:*:*:*:*
part: a version: 3.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Enterprise Virtualization (9ff55c9d-4cf6-59e3-9ba0-25dc2dbb6315) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-3456 |
vulnerable | 2026-06-08 05:06:38.358428 |
Details available
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (out-of-bounds write and guest crash) or possibly execute arbitrary code via the (1) FD_CMD_READ_ID, (2) FD_CMD_DRIVE_SPECIFICATION_COMMAND, or other unspecified commands, aka VENOM.
Published: 2015-05-13T18:00:00.000Z
Updated: 2024-08-06T05:47:57.892Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1841 |
vulnerable | 2026-06-08 05:06:26.421156 |
Details available
The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users to bypass the timeout function by selecting a VM in the VM grid view.
Published: 2015-09-08T15:00:00.000Z
Updated: 2024-08-06T04:54:16.320Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8170 |
not_vulnerable | 2026-06-08 05:06:08.245736 |
Details available
ovirt_safe_delete_config in ovirtfunctions.py and other unspecified locations in ovirt-node 3.0.0-474-gb852fd7 as packaged in Red Hat Enterprise Virtualization 3 do not properly quote input strings, which allows remote authenticated users and physically proximate attackers to execute arbitrary commands via a ; (semicolon) in an input string.
Published: 2017-09-25T19:00:00.000Z
Updated: 2024-08-06T13:10:50.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8167 |
vulnerable | 2026-06-08 05:06:08.237200 |
Details available
vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack
Published: 2019-11-13T16:11:46.000Z
Updated: 2024-08-06T13:10:51.146Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-5177 |
vulnerable | 2026-06-08 05:05:47.090830 |
Details available
libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declaration in conjunction with an entity reference to the (1) virDomainDefineXML, (2) virNetworkCreateXML, (3) virNetworkDefineXML, (4) virStoragePoolCreateXML, (5) virStoragePoolDefineXML, (6) virStorageVolCreateXML, (7) virDomainCreateXML, (8) virNodeDeviceCreateXML, (9) virInterfaceDefineXML, (10) virStorageVolCreateXMLFrom, (11) virConnectDomainXMLFromNative, (12) virConnectDomainXMLToNative, (13) virSecretDefineXML, (14) virNWFilterDefineXML, (15) virDomainSnapshotCreateXML, (16) virDomainSaveImageDefineXML, (17) virDomainCreateXMLWithFiles, (18) virConnectCompareCPU, or (19) virConnectBaselineCPU API method, related to an XML External Entity (XXE) issue. NOTE: this issue was SPLIT from CVE-2014-0179 per ADT3 due to different affected versions of some vectors.
Published: 2014-08-03T18:00:00.000Z
Updated: 2024-08-06T11:34:37.613Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0179 |
vulnerable | 2026-06-08 05:05:12.089944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4282 |
vulnerable | 2026-06-08 05:04:35.104035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4280 |
vulnerable | 2026-06-08 05:04:35.101408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4236 |
vulnerable | 2026-06-08 05:04:34.758094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4181 |
vulnerable | 2026-06-08 05:04:34.428429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2176 |
vulnerable | 2026-06-08 05:03:58.855788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2151 |
vulnerable | 2026-06-08 05:03:58.643437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1591 |
vulnerable | 2026-06-08 05:03:54.866879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0167 |
vulnerable | 2026-06-08 05:03:02.249925 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3406 |
vulnerable | 2026-06-08 05:02:09.637233 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3405 |
vulnerable | 2026-06-08 05:02:09.635070 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3404 |
vulnerable | 2026-06-08 05:02:09.631533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.