Skip to contentRedhat Enterprise Linux vulnerabilities
- openslp, canonical ubuntu linux, debian linux +35 more +37 moreOpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue...CVE-2017-17833Fix available9.8 Critical
- oracle corporation java, oracle jdk, jre +3 more +5 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported...CVE-2018-28117.7 High
- redhat gluster storage, debian linux, opensuse leap +4 more +6 moreA privilege escalation flaw was found in gluster 3.x snapshot scheduler. Any gluster client...CVE-2018-1088Public exploitFix available8.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-2819Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2817Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2815Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +10 more +12 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-2814Fix available8.3 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +14 more +16 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2813Fix available4.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). Supported...CVE-2018-2800Fix available4.2 Medium
- oracle jrockit, oracle corporation java, apache xerces-j +13 more +15 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2799Fix availableEPSS 15.0%5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2798Fix available5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2797Fix available5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2796Fix available5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2795Fix available5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security)....CVE-2018-2794Fix available7.7 High
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-2790Fix available3.1 Low
- oracle jrockit, canonical ubuntu linux, hp xp7 command view +6 more +8 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2783Fix available7.4 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2781Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking)....CVE-2018-2771Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-2761Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2018-2755Fix available7.7 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreThe set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex...CVE-2018-10194Fix available7.8 High
- libreoffice, canonical ubuntu linux, debian linux +3 more +5 moreThe SwCTBWrapper::Read function in sw/source/filter/ww8/ww8toolbar.cxx in LibreOffice before 5.4...CVE-2018-10120Fix available7.8 High
- libreoffice, canonical ubuntu linux, debian linux +3 more +5 moresot/source/sdstor/stgstrms.cxx in LibreOffice before 5.4.5.1 and 6.x before 6.0.1.1 uses an...CVE-2018-10119Fix available7.8 High
- perl, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular...CVE-2018-6798Fix available7.5 High
- perl, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap...CVE-2018-6797Fix available9.8 Critical
- redhat pcs, clusterlabs pacemaker command line interface, redhat enterprise linux +2 morepcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user...CVE-2018-1079Fix available8.7 High
- corosync, canonical ubuntu linux, debian linux +1 more +3 morecorosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.CVE-2018-1084Fix available7.5 High
- zsh, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 morezsh through version 5.4.2 is vulnerable to a stack-based buffer overflow in the utils.c...CVE-2018-1100Fix available7.8 High
- redhat pcs, clusterlabs pacemaker command line interface, debian linux +1 more +3 morepcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST...CVE-2018-1086Fix available4.3 Medium
- gnu patch, canonical ubuntu linux, debian linux +6 more +8 moreGNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files,...CVE-2018-1000156Fix available7.8 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...CVE-2018-8778Fix available7.5 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreIn Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0...CVE-2018-8777Fix available7.5 High
- ruby-lang ruby, canonical ubuntu linux, debian linux +1 more +3 moreDirectory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before...CVE-2018-6914Fix availableEPSS 10.2%7.5 High
- apple icloud, itunes, safari +8 more +10 moreAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...CVE-2018-4117Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreThe ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not...CVE-2018-1094Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write...CVE-2018-7566Fix available7.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +5 more +7 moreA use-after-free vulnerability can occur in the compositor during certain graphics operations...CVE-2018-5148Fix available9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreA specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30,...CVE-2018-1301Fix availableEPSS 14.5%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to...CVE-2018-1283Fix available5.3 Medium
- zsh, canonical ubuntu linux, debian linux +3 more +5 moreZsh before version 5.4.2-test-1 is vulnerable to a buffer overflow in the shell autocomplete...CVE-2018-1083Fix available7.8 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a...CVE-2017-15715Public exploitFix availableEPSS 86.2%8.1 High
- apache http server, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if...CVE-2017-15710Fix availableEPSS 17.5%7.5 High
- exiv2, debian linux, redhat enterprise linux desktop +2 more +4 moreIn Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2...CVE-2018-8976Fix available6.5 Medium
- rsyslog librelp, canonical ubuntu linux, debian linux +6 more +8 morersyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the...CVE-2018-1000140Public exploitFix available9.8 Critical
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka...CVE-2018-8945Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +3 more +5 moreIn LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw...CVE-2018-8905Fix available8.8 High
- qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 moreImproper Access Control in SLF4JCVE-2018-8088Fix availableEPSS 14.7%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...CVE-2018-5146Public exploitFix availableEPSS 11.9%8.8 High
- Show moreLoading…