Skip to contentRedhat Enterprise Linux vulnerabilities
- apache subversion, apple xcode, opensuse +6 more +8 moreThe (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through...CVE-2015-0248Fix availableEPSS 12.8%5.0 Medium
- apache subversion, apple xcode, redhat enterprise linux desktop +3 more +5 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x...CVE-2014-8108Fix available5.0 Medium
- apache subversion, apple xcode, debian linux +5 more +7 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x...CVE-2014-3580Fix availableEPSS 11.0%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2573Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-2571Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2568Fix available5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0505Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0501Fix availableEPSS 10.3%5.7 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0499Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0441Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0433Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated...CVE-2015-0432Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...CVE-2015-0411Fix available7.5 High
- oracle mysql, mariadb, redhat enterprise linux desktop +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2015-0391Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0382Fix availableEPSS 10.1%4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0381Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0374Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...CVE-2014-6568Fix available3.5 Low
- fedoraproject 389 directory server, redhat directory server, enterprise linux +2 moreRed Hat Directory Server 8 and 389 Directory Server, when debugging is enabled, allows remote...CVE-2014-3562Fix available5.0 Medium
- apache subversion, apple xcode, canonical ubuntu linux +6 more +8 moreApache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of...CVE-2014-3528Fix available4.0 Medium
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows...CVE-2014-5177Fix available1.2 Low
- linux kernel, redhat enterprise linux eus, enterprise linux server aus +1 more +3 moreThe mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly...CVE-2014-5045Fix available6.2 Medium
- samba, canonical ubuntu linux, redhat enterprise linux +2 moreNetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows...CVE-2014-3560Fix availableEPSS 56.4%7.9 High
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...CVE-2015-3405Fix available7.5 High
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreThe acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT...CVE-2014-4344Fix available7.8 High
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreDouble free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi...CVE-2014-4343Fix available7.6 High
- mit kerberos, kerberos 5, debian linux +4 more +6 moreMIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a...CVE-2014-4342Fix available5.0 Medium
- mit kerberos 5, debian linux, fedoraproject fedora +7 more +9 moreMIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ...CVE-2014-4341Fix available5.0 Medium
- oracle jdk, openjdk, debian linux +2 more +4 moreUnspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7...CVE-2014-24839.3 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +4 more +6 moreOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...CVE-2014-4975Fix available5.0 Medium
- python, redhat enterprise linux, software collections +2 moreThe CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL...CVE-2014-4650Public exploitFix availableEPSS 23.9%9.8 Critical
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 Low
- libreoffice, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreLibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and...CVE-2014-0247Fix available10.0 High
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict...CVE-2014-4039Fix available2.1 Low
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to ...CVE-2014-4038Fix available4.4 Medium
- redhat enterprise linuxA certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote...CVE-2014-01865.0 Medium
- fedoraproject sssd, redhat enterprise linux +1 moreThe System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership...CVE-2014-0249Fix available3.3 Low
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreThe Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which...CVE-2014-3940Fix available4.0 Medium
- gnu gnutls, debian linux, redhat enterprise linux +2 moreGnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...CVE-2015-0294Fix available7.5 High
- gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 Medium
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 High
- gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 Medium
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read...CVE-2014-0179Fix available1.9 Low
- rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 moreactionpack Path Traversal vulnerabilityCVE-2014-0130In KEVPublic exploitFix availableEPSS 53.7%7.5 High
- virt-who project virt-who, redhat enterprise linux desktop, enterprise linux server +1 more +3 morevirt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to...CVE-2014-0189Fix available2.1 Low
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- Show moreLoading…