Skip to contentRedhat Enterprise Linux vulnerabilities
- jasper project jasper, debian linux, opensuse +1 more +3 moreMultiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote...CVE-2014-8158Fix availableEPSS 14.4%6.8 Medium
- jasper project jasper, debian linux, opensuse +1 more +3 moreOff-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote...CVE-2014-8157Fix availableEPSS 16.9%7.5 High
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of...CVE-2014-7943Fix available5.0 Medium
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreThe Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a...CVE-2014-7942Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7926Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7923Fix available7.5 High
- libtiff, apple iphone os, mac os x +6 more +8 moreThe _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows...CVE-2014-8130Fix available6.5 Medium
- libtiff, apple iphone os, mac os x +5 more +7 moreLibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or...CVE-2014-8129Fix available8.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreHeap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows...CVE-2014-8141Fix available7.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreHeap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows...CVE-2014-8140Fix available7.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreHeap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows...CVE-2014-8139Fix available7.8 High
- jasper project jasper, redhat enterprise linux +1 moreHeap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote...CVE-2014-8138Fix availableEPSS 18.5%7.5 High
- jasper project jasper, redhat enterprise linux +1 moreDouble free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier...CVE-2014-8137Fix availableEPSS 14.5%6.8 Medium
- redhat libvirt, canonical ubuntu linux, mageia +5 more +7 moreThe (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c...CVE-2014-8136Fix available2.1 Low
- pcre, fedoraproject fedora, mariadb +8 more +10 moreHeap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of...CVE-2014-8964Fix available5.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +9 more +11 moreThe krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap...CVE-2014-5353Fix available3.5 Low
- debian hivex, opensuse, redhat enterprise linux desktop +3 more +5 morelib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain...CVE-2014-9273Fix available4.6 Medium
- gnome gnome-shell, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreGNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...CVE-2014-7300Fix available7.2 High
- jqueryui jquery ui, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 morejquery-ui Tooltip widget vulnerable to XSSCVE-2012-6662Fix available4.3 Medium
- redhat enterprise linux desktop, enterprise linux server, enterprise linux server aus +4 more +6 moreThe mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service ...CVE-2014-8567Fix available9.4 High
- adobe flash player, hp insight orchestration, system management homepage +12 more +14 moreHeap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before...CVE-2015-3113In KEVPublic exploitFix availableEPSS 99.8%9.8 Critical
- adobe flash player, novell suse linux enterprise desktop, suse linux enterprise workstation extension +6 more +8 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3044Fix available5.0 Medium
- adobe flash player, novell suse linux enterprise desktop, suse linux enterprise workstation extension +8 more +10 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3043In KEVPublic exploitFix availableEPSS 73.9%9.8 Critical
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3042Public exploitFix availableEPSS 36.8%10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3041Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3040Fix available5.0 Medium
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-3039Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3038Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0360Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0358Fix availableEPSS 10.4%10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0355Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0354Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0353Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0352Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0351Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0350Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0349Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreBuffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169...CVE-2015-0348Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0347Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreDouble free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17...CVE-2015-0346Fix availableEPSS 10.4%10.0 High
- qemu, redhat enterprise linux desktop, enterprise linux eus +4 more +6 moreThe host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration,...CVE-2014-7840Fix available7.5 High
- gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...CVE-2014-8564Fix available5.0 Medium
- libreoffice, canonical ubuntu linux, opensuse +3 more +5 moreUse-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4...CVE-2014-3693Fix available7.5 High
- zend framework, fedoraproject fedora, redhat enterprise linux +2 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-8089Fix available9.8 Critical
- ruby-lang ruby, canonical ubuntu linux, opensuse +1 more +3 moreThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...CVE-2014-8080Fix available5.0 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...CVE-2014-0148Fix available5.5 Medium
- php, redhat enterprise linux +1 moreThe php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before...CVE-2015-4644Fix available7.5 High
- php, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before...CVE-2015-4643Fix availableEPSS 15.4%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x...CVE-2015-4603Fix availableEPSS 10.6%9.8 Critical
- Show moreLoading…