Skip to contentRedhat Enterprise Linux vulnerabilities
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...CVE-2015-4602Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 morePHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...CVE-2015-4601Fix available9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...CVE-2015-4600Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...CVE-2015-4599Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...CVE-2015-4598Fix available6.5 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...CVE-2015-4148Public exploitFix availableEPSS 19.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...CVE-2015-4026Fix availableEPSS 18.8%7.5 High
- php, apple mac os x, hp system management homepage +9 more +11 moreAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...CVE-2015-4024Fix availableEPSS 41.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...CVE-2015-4022Fix availableEPSS 20.1%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...CVE-2015-4021Fix availableEPSS 20.5%5.0 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3412Fix available5.3 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3411Fix available6.5 Medium
- php, apple mac os x, oracle linux +8 more +10 moreMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...CVE-2015-3329Fix availableEPSS 38.2%7.5 High
- php, apple mac os x, opensuse +6 more +8 moreUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-2787Fix availableEPSS 11.8%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...CVE-2015-2783Fix available5.8 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0412Fix available7.2 High
- oracle jrockit, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5...CVE-2015-0410Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0408Fix available10.0 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +3 more +5 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0407Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise server +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0395Fix available9.3 High
- oracle jrockit, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71...CVE-2015-0383Fix available5.4 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2014-6601Fix available10.0 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreRace condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM...CVE-2014-3611Fix available4.7 Medium
- xmlsoft libxml2, apple mac os x, canonical ubuntu linux +2 more +4 moreparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...CVE-2014-3660Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google...CVE-2014-3198Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe SessionService::GetLastSession function in browser/sessions/session_service.cc in Google...CVE-2014-3193Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome...CVE-2014-3189Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to...CVE-2014-3200Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as...CVE-2014-3199Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in...CVE-2014-3197Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreGoogle V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap...CVE-2014-3195Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125...CVE-2014-3194Fix available7.5 High
- google chrome, apple iphone os, itunes +6 more +8 moreUse-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom...CVE-2014-3192Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows...CVE-2014-3191Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in...CVE-2014-3190Fix available7.5 High
- google chrome, chrome os, redhat enterprise linux desktop supplementary +3 more +5 moreGoogle Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the...CVE-2014-3188Fix available10.0 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...CVE-2014-3640Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...CVE-2014-7145Fix available7.8 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize...CVE-2015-3636Public exploitFix available4.9 Medium
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreRace condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel...CVE-2014-9529Fix available6.9 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- libvncserver, debian linux, fedoraproject fedora +2 more +4 moreMultiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer...CVE-2014-6055Fix available6.5 Medium
- libvncserver, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and...CVE-2014-6051Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...CVE-2015-1779Fix available8.6 High
- apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 Medium
- apache openoffice, libreoffice, redhat enterprise linux desktop +2 more +4 moreThe OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow...CVE-2014-3575Fix availableEPSS 11.3%4.3 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote...CVE-2015-0251Fix available4.0 Medium
- Show moreLoading…