Skip to contentRedhat Enterprise Linux vulnerabilities
- google chrome, fedoraproject fedora, redhat enterprise linux desktop +2 more +4 moreIncorrect object lifecycle management in SwiftShader in Google Chrome prior to 72.0.3626.81...CVE-2019-57618.8 High
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moreIn the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL...CVE-2019-8912Fix available7.8 High
- systemd project systemd, canonical ubuntu linux, debian linux +19 more +21 moreAn issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus...CVE-2019-6454Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5782Public exploitFix availableEPSS 13.4%8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5781Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior...CVE-2019-5780Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5779Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreA missing case for handling special schemes in permission request checks in Extensions in Google...CVE-2019-5778Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5777Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5776Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81...CVE-2019-5775Fix available6.5 Medium
- debian linux, google chrome, fedoraproject fedora +3 more +5 moreOmission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google...CVE-2019-5774Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5773Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreSharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0...CVE-2019-5772Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5770Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of invalid end character position when front rendering in Blink in Google...CVE-2019-5769Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreDevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to...CVE-2019-5768Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient protection of permission UI in WebAPKs in Google Chrome on Android prior to 72.0...CVE-2019-5767Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of origin taint checking in Canvas in Google Chrome prior to 72.0.3626.81...CVE-2019-5766Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreAn exposed debugging endpoint in the browser in Google Chrome on Android prior to 72.0.3626.81...CVE-2019-5765Fix available5.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect pointer management in WebRTC in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5764Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreFailure to check error conditions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5763Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81...CVE-2019-5762Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInsufficient checks of pointer validity in WebRTC in Google Chrome prior to 72.0.3626.81 allowed...CVE-2019-5760Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to...CVE-2019-5759Fix available9.6 Critical
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect object lifecycle management in Blink in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5758Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreAn incorrect object type assumption in SVG in Google Chrome prior to 72.0.3626.81 allowed a...CVE-2019-5757Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate memory management when caching in PDFium in Google Chrome prior to 72.0.3626.81...CVE-2019-5756Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreIncorrect handling of negative zero in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote...CVE-2019-5755Fix available8.1 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreImplementation error in QUIC Networking in Google Chrome prior to 72.0.3626.81 allowed an...CVE-2019-5754Fix available6.5 Medium
- advancemame advancecomp, debian linux, fedoraproject fedora +3 more +5 moreAn issue was discovered in AdvanceCOMP through 2.1. An invalid memory address occurs in the...CVE-2019-8383Fix available7.8 High
- advancemame advancecomp, debian linux, fedoraproject fedora +3 more +5 moreAn issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the...CVE-2019-8379Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...CVE-2019-6974Public exploitFix availableEPSS 16.5%8.1 High
- flatpak, debian linux, redhat enterprise linux desktop +5 more +7 moreFlatpak before 1.0.7, and 1.1.x and 1.2.x before 1.2.3, exposes /proc in the apply_extra script...CVE-2019-8308Fix available8.2 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on...CVE-2018-125499.8 Critical
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux desktop +3 more +5 moreIn Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native...CVE-2018-125479.8 Critical
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...CVE-2019-5736Public exploitFix availableEPSS 98.5%8.6 High
- elfutils project elfutils, redhat enterprise linux, enterprise linux desktop +5 more +7 moreIn elfutils 0.175, a negative-sized memcpy is attempted in elf_cvt_note in libelf/note_xlate.h...CVE-2019-7664Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreIn elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in...CVE-2019-7665Fix available5.5 Medium
- sqlalchemy, debian linux, opensuse backports sle +6 more +8 moreSQLAlchemy is vulnerable to SQL Injection via group_by parameterCVE-2019-7548Fix available7.8 High
- the gnome projectr gdm, canonical ubuntu linux, gnome display manager +1 more +3 moreA vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...CVE-2019-3825Fix available6.3 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...CVE-2019-1000020Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2...CVE-2019-1000019Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...CVE-2019-7310Fix available7.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added...CVE-2018-18505Fix available10.0 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMozilla developers and community members reported memory safety bugs present in Firefox 64 and...CVE-2018-18501Fix available9.8 Critical
- Show moreLoading…