Skip to contentRedhat Enterprise Linux vulnerabilities
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom...CVE-2018-18500Public exploitFix availableEPSS 12.7%9.8 Critical
- red hat, inc. spice, canonical ubuntu linux, debian linux +6 more +8 moreSpice, versions 0.5.2 through 0.14.1, are vulnerable to an out-of-bounds read due to an off-by...CVE-2019-3813Fix available7.5 High
- debian linux, systemd, redhat enterprise linux desktop +5 more +7 moreA memory leak was discovered in the backport of fixes for CVE-2018-16864 in Red Hat Enterprise...CVE-2019-3815Fix available3.3 Low
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreAn issue was discovered in elfutils 0.175. A segmentation fault can occur in the function...CVE-2019-7150Fix available5.5 Medium
- rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 moreA denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...CVE-2018-16881Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...CVE-2019-6116Public exploitFix availableEPSS 41.6%7.8 High
- python, debian linux, opensuse leap +4 more +6 moreAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...CVE-2019-5010Public exploitFix availableEPSS 20.7%5.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection)....CVE-2019-25394.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2019-25365.0 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2019-25354.1 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...CVE-2019-25336.5 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-25304.9 Medium
- oracle corporation java, netapp oncommand unified manager, oncommand workflow automation +9 more +11 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The...CVE-2019-24493.1 Low
- oracle mysql, oracle corporation mysql server, netapp oncommand unified manager +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-24365.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +10 more +12 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2019-2537Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2534Fix available7.1 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2532Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2531Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2529Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-2510Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2481Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2455Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2019-2434Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported...CVE-2019-2422Fix available3.1 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2420Fix available4.9 Medium
- fedoraproject sssd, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in sssd. If a user was configured with no home directory set, sssd...CVE-2019-3811Fix available4.1 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...CVE-2018-16846Fix available6.5 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions...CVE-2018-14662Fix available3.5 Low
- systemd, canonical ubuntu linux, netapp active iq performance analytics services +2 more +4 moreIt was discovered systemd does not correctly check the content of PIDFile files before using it...CVE-2018-16888Fix available4.4 Medium
- etcd, fedoraproject fedora, redhat enterprise linux desktop +3 more +5 morego.etcd.io/etcd Authentication BypassCVE-2018-16886Fix available6.8 Medium
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux...CVE-2019-3460Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel...CVE-2019-3459Fix available6.5 Medium
- docker engine, redhat enterprise linux server +1 moreDocker Engine before 18.09 allows attackers to cause a denial of service (dockerd memory...CVE-2018-20699Fix available4.9 Medium
- polkit project polkit, canonical ubuntu linux, debian linux +6 more +8 moreIn PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because...CVE-2019-6133Fix available6.7 Medium
- systemd, canonical ubuntu linux, debian linux +18 more +20 moreAn out of bounds read was discovered in systemd-journald in the way it parses log messages that...CVE-2018-16866Fix available4.3 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...CVE-2018-20685Fix available5.3 Medium
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...CVE-2018-16865Fix available7.5 High
- systemd, canonical ubuntu linux, debian linux +8 more +10 moreAn allocation of memory without limits, that could result in the stack clashing with another...CVE-2018-16864Fix available7.4 High
- linux kernel, redhat enterprise linux server +1 moreA flaw was found in the Linux kernel that allows the userspace to call memcpy_fromiovecend() and...CVE-2018-16885Fix available4.7 Medium
- red hat ansible, canonical ubuntu linux, debian linux +6 more +8 moreAnsible sensitive information disclosureCVE-2018-16876Fix available3.1 Low
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ...CVE-2018-20662Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreA reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of...CVE-2018-20650Fix available6.5 Medium
- google libwebp, redhat enterprise linux +1 moreA flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function...CVE-2018-25014Fix available9.8 Critical
- google libwebp, redhat enterprise linux +1 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2018-25013Fix available9.1 Critical
- google libwebp, redhat enterprise linux +1 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2018-25012Fix available9.1 Critical
- google libwebp, redhat enterprise linux +1 moreA flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow was found in...CVE-2018-25011Fix available9.8 Critical
- google libwebp, redhat enterprise linux +1 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2018-25010Fix available9.1 Critical
- google libwebp, redhat enterprise linux +1 moreA flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function...CVE-2018-25009Fix available9.1 Critical
- Show moreLoading…