Skip to contentRedhat Enterprise Linux vulnerabilities
- oracle mysql, canonical ubuntu linux, debian linux +4 more +6 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5...CVE-2013-38394.0 Medium
- xinetd, redhat enterprise linux +1 morexinetd does not enforce the user and group configuration directives for TCPMUX services, which...CVE-2013-4342Fix available7.6 High
- ruby-lang ruby, rubygems, redhat enterprise linux +2 moreRubyGems Regular Expression Denial of Service vulnerabilityCVE-2013-4287Fix available4.3 Medium
- qemu, canonical ubuntu linux, opensuse +4 more +6 moreBuffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has...CVE-2013-4344Fix available7.2 High
- lennart poettering rkit, redhat enterprise linux +1 moreRealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority...CVE-2013-4326Fix available4.6 Medium
- spice-gtk project spice-gtk, redhat enterprise linux +1 morespice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure...CVE-2013-4324Fix available4.6 Medium
- redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 morelibvirt 1.0.5.x before 1.0.5.6, 0.10.2.x before 0.10.2.8, and 0.9.12.x before 0.9.12.2 allows...CVE-2013-4311Fix available4.6 Medium
- polkit project polkit, canonical ubuntu linux, opensuse +1 more +3 moreRace condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit...CVE-2013-4288Fix available7.2 High
- redhat libvirt, canonical ubuntu linux, redhat enterprise linux +2 moreThe remoteDispatchDomainMemoryStats function in daemon/remote.c in libvirt 0.9.1 through 0.10.1.x...CVE-2013-4296Fix available4.0 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUse-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function...CVE-2015-0831Fix available6.8 Medium
- gnu glibc, canonical ubuntu linux, opensuse +1 more +3 moreThe send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does...CVE-2013-7423Fix available5.0 Medium
- gnu glibc, redhat enterprise linux +1 moreMultiple integer overflows in malloc/malloc.c in the GNU C Library (aka glibc or libc6) 2.18 and...CVE-2013-4332Fix available4.3 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and...CVE-2012-3406Fix available6.8 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and...CVE-2012-3405Fix available5.0 Medium
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +1 more +3 moreThe vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and...CVE-2012-3404Fix available5.0 Medium
- freedesktop poppler, opensuse, redhat enterprise linux +1 more +3 moreThe error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute...CVE-2012-2142Fix available7.8 High
- php, canonical ubuntu linux, redhat enterprise linux +2 moreThe openssl_x509_parse function in openssl.c in the OpenSSL module in PHP before 5.4.18 and 5.5.x...CVE-2013-4248Fix available4.3 Medium
- gnome evolution, evolution data server, redhat enterprise linux desktop +2 more +4 moreThe gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and...CVE-2013-4166Fix available7.5 High
- samba, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3...CVE-2013-4124Public exploitFix availableEPSS 69.0%5.0 Medium
- isc bind, dnsco bind, fedoraproject fedora +9 more +11 moreThe RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9...CVE-2013-4854Fix availableEPSS 34.2%7.8 High
- redhat enterprise linux, enterprise linux desktop supplementary, enterprise linux server supplementary +1 more +3 moreUnquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise...CVE-2013-2231Fix available7.2 High
- jeff ortel suds, opensuse, redhat enterprise linux +2 moreImproper Link Resolution Before File Access in SudsCVE-2013-2217Public exploitFix available1.2 Low
- redhat enterprise linuxA certain Red Hat patch to the do_filp_open function in fs/namei.c in the kernel package before 2...CVE-2013-21884.7 Medium
- redhat enterprise linuxA certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on...CVE-2013-19355.7 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...CVE-2013-1896Fix availableEPSS 29.5%4.3 Medium
- redhat enterprise linuxThe Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows...CVE-2013-20512.6 Low
- redhat enterprise linux, jboss enterprise web server +1 moreThe (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...CVE-2013-1976Fix available6.9 Medium
- redhat enterprise linuxA certain Red Hat patch for the Linux kernel 2.6.32 on Red Hat Enterprise Linux (RHEL) 6 allows...CVE-2013-22246.9 Medium
- mozilla firefox, thunderbird, thunderbird esr +13 more +15 moreMozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and...CVE-2013-1690In KEVPublic exploitEPSS 69.0%8.8 High
- haxx curl, libcurl, canonical ubuntu linux +2 more +4 moreHeap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl...CVE-2013-2174Fix available6.8 Medium
- haproxy, canonical ubuntu linux, debian linux +1 more +3 moreHAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*...CVE-2013-2175Fix available5.0 Medium
- apache http server, canonical ubuntu linux, opensuse +6 more +8 moremod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...CVE-2013-1862Fix availableEPSS 24.9%5.1 Medium
- mesa3d mesa, canonical ubuntu linux, opensuse +1 more +3 moreThe Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of...CVE-2013-1872Fix available6.8 Medium
- linux kernel, redhat enterprise linux +1 moreA certain Red Hat patch to the __br_deliver function in net/bridge/br_forward.c in the Linux...CVE-2011-29426.8 Medium
- redhat enterprise linuxThe perf subsystem in the kernel package 2.6.32-122.el6.x86_64 in Red Hat Enterprise Linux (RHEL)...CVE-2011-26931.9 Low
- redhat enterprise linux, enterprise linux desktop, enterprise linux eus +6 more +8 morerhn-migrate-classic-to-rhsm tool in Red Hat subscription-manager does not verify the Red Hat...CVE-2012-6137Fix available4.3 Medium
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-333510.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-333410.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-333310.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-333210.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-333110.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-333010.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-332910.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-332810.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-332710.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-332610.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-332510.0 High
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-332410.0 High
- adobe acrobat, reader and acrobat, acrobat reader +6 more +8 moreInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x...CVE-2013-2729In KEVPublic exploitEPSS 66.6%9.8 Critical
- adobe air, air sdk, flash player +7 more +9 moreAdobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X,...CVE-2013-272810.0 High
- Show moreLoading…