Skip to contentRedhat Enterprise Linux vulnerabilities
- spice project spice, redhat enterprise linux, enterprise linux desktop +3 more +5 moreRace condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote...CVE-2015-3247Fix available6.9 Medium
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +5 more +7 morentp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of...CVE-2015-5195Public exploitFix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- clusterlabs pacemaker, redhat enterprise linux high availability, enterprise linux resilient storage +2 morePacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only...CVE-2015-1867Fix available7.5 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- ibm java sdk, redhat enterprise linux desktop, enterprise linux eus +5 more +7 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...CVE-2015-19315.5 Medium
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux hpc node eus +4 more +6 moreThe Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local...CVE-2015-31495.5 Medium
- libuser project libuser, opensuse, redhat enterprise linux +2 morelibuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the...CVE-2015-3246In KEVPublic exploitFix available7.2 High
- linux kernel, redhat enterprise linux desktop, enterprise linux hpc node +3 more +5 morearch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET...CVE-2015-5157Fix available7.2 High
- google chrome, debian linux, opensuse +4 more +6 moreThe Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS...CVE-2015-1288Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreCross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function...CVE-2015-1286Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used...CVE-2015-1282Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreInteger overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium,...CVE-2015-1279Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 morecontent/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not...CVE-2015-1278Fix available4.3 Medium
- google chrome, debian linux, opensuse +3 more +5 moreGoogle Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous...CVE-2015-1274Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreHeap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome...CVE-2015-1273Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 morePDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of...CVE-2015-1271Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to...CVE-2015-1289Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreBlink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits...CVE-2015-1287Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreThe XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in...CVE-2015-1285Fix available5.0 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +2 more +4 moreThe LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google...CVE-2015-1284Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 morecore/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not...CVE-2015-1281Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreSkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote...CVE-2015-1280Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0...CVE-2015-1277Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the...CVE-2015-1276Fix available9.8 Critical
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403...CVE-2015-1272Fix available7.5 High
- google chrome, debian linux, opensuse +5 more +7 moreThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...CVE-2015-1270Fix available6.8 Medium
- mariadb, oracle mysql, debian linux +9 more +11 moreOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...CVE-2015-3152Public exploitFix available5.9 Medium
- oracle mysql, redhat enterprise linux +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated...CVE-2015-4756Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows...CVE-2015-4757Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4752Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2648Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2643Fix available4.0 Medium
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2582Fix available4.0 Medium
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...CVE-2015-5123In KEVFix availableEPSS 18.8%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...CVE-2015-5122In KEVPublic exploitFix availableEPSS 87.0%9.8 Critical
- adobe flash player, opensuse evergreen, opensuse +8 more +10 moreUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in...CVE-2015-5119In KEVPublic exploitFix availableEPSS 98.6%9.8 Critical
- linux kernel, redhat enterprise linux server aus +1 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide...CVE-2015-5366Fix available5.0 Medium
- haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 Medium
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreThe (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not...CVE-2015-5364Fix available7.8 High
- ruby-lang ruby, rubygems, oracle solaris +1 more +3 moreRubyGems vulnerable to DNS hijack attackCVE-2015-3900Fix available5.0 Medium
- netcf project netcf, fedoraproject fedora, redhat enterprise linux +2 moreThe find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of...CVE-2014-8119Fix available7.5 High
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5...CVE-2015-46057.5 High
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4...CVE-2015-46047.5 High
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium
- Show moreLoading…