Skip to contentRedhat Enterprise Linux vulnerabilities
- google chrome, fedoraproject fedora, opensuse backports +3 more +5 moreUse after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker...CVE-2019-13723Fix available8.8 High
- mediawiki, debian linux, fedoraproject fedora +1 more +3 moreMediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which...CVE-2013-1817Fix available7.5 High
- mediawiki, debian linux, fedoraproject fedora +1 more +3 moreMediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of...CVE-2013-1816Fix available7.5 High
- redhat tuned, debian linux, fedoraproject fedora +4 more +6 moretuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill...CVE-2012-6136Fix available5.5 Medium
- openpegasus tog-pegasus, redhat enterprise linux +1 moretog-Pegasus has a package hash collision DoS vulnerabilityCVE-2011-49677.5 High
- linux kernel, opensuse leap, redhat enterprise linux +2 moreA memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp...CVE-2019-19081Fix available5.9 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux +2 moreA memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp...CVE-2019-19076Fix availableDisputed5.9 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the...CVE-2019-19072Fix available4.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu...CVE-2019-19068Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux...CVE-2019-19066Fix available4.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreA memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel...CVE-2019-19062Fix available4.7 Medium
- oniguruma project oniguruma, debian linux, fedoraproject fedora +1 more +3 moreAn integer overflow in the search_in_range function in regexec.c in Oniguruma 6.x before 6.9...CVE-2019-19012Public exploitFix availableEPSS 10.6%9.8 Critical
- drupal, debian linux, drupal core +2 more +4 moreAn access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the...CVE-2011-27267.5 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle backs up private filesCVE-2012-1156Fix available7.5 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreMoodle before 2.2.2 has a password and web services issue where when the user profile is updated...CVE-2012-11688.2 High
- moodle, debian linux, fedoraproject fedora +1 more +3 moreMoodle has a database activity export permission issue where the export function of the database...CVE-2012-11557.5 High
- unixodbc, debian linux, opensuse +1 more +3 moreThe SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow...CVE-2011-1145Fix available7.8 High
- consolekit, debian linux, redhat enterprise linux +2 moreIn ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw...CVE-2010-46648.8 High
- debian linux, storaged-project udisks, fedoraproject fedora +2 more +4 moreudisks before 1.0.3 allows a local user to load arbitrary Linux kernel modules.CVE-2010-46617.8 High
- php, php5, debian linux +1 more +3 morePHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which...CVE-2010-46577.5 High
- gdk-pixbuf, debian linux, redhat enterprise linux +2 moregdk-pixbuf through 2.31.1 has GIF loader buffer overflow when initializing decompression tables...CVE-2011-28979.8 Critical
- [unknown] dpdk, dpdk data plane development kit, fedoraproject fedora +3 more +5 moreA flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before...CVE-2019-14818Fix available7.5 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...CVE-2019-11135Fix available6.5 Medium
- intel graphics driver, canonical ubuntu linux, intel atom x5-e3930 firmware +354 more +356 moreInsufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and...CVE-2019-0155Fix available7.8 High
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...CVE-2018-12207Fix available6.5 Medium
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreA flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission...CVE-2019-14824Fix available6.5 Medium
- apple icloud, icloud for windows, ios +10 more +12 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8814Fix available8.8 High
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory leak in the sof_set_get_large_ctrl_data() function in sound/soc/sof/ipc.c in the Linux...CVE-2019-18811Fix available5.5 Medium
- linux kernel, broadcom fabric operating system, netapp active iq unified manager +14 more +16 moreAn issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is...CVE-2019-18805Fix available9.8 Critical
- redhat pagure, fedoraproject fedora, redhat enterprise linux +2 morePagure: XSS possible in file attachment endpointCVE-2016-10000376.1 Medium
- red hat enterprise linux, redhat enterprise mrg +1 moreThe kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer,...CVE-2014-81815.5 Medium
- isc bind, nic knot resolver, nlnetlabs nsd +1 more +3 moreCache Poisoning issue exists in DNS Response Rate Limiting.CVE-2013-56615.9 Medium
- debian linux, gnome display manager, opensuse leap +1 more +3 moregdm3 3.14.2 and possibly later has an information leak before screen lockCVE-2016-10000022.4 Low
- python software foundation; beanbag djblets, review board, review board board +2 more +4 moreReviewBoard and Djblets library are vulnerable to code executionCVE-2013-4409Fix available9.8 Critical
- debian shadow, red hat sudo, debian linux +1 more +3 moreThere is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su -...CVE-2005-4890Fix available7.8 High
- apple icloud, icloud for windows, ios +11 more +13 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8816Fix available8.8 High
- apple icloud, icloud for windows, ios +10 more +12 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8815Fix available8.8 High
- gnu cpio, redhat enterprise linux +1 moreIn all versions of cpio before 2.13 does not properly validate input files when generating TAR...CVE-2019-14866Fix available6.7 Medium
- sensiolabs symfony, fedoraproject fedora, redhat enterprise linux +2 moreSymfony collectionCascaded and collectionCascadedDeeply fields security bypassCVE-2013-4751Fix available8.1 High
- gnome evince, debian linux, opensuse +1 more +3 moreevince is missing a check on number of pages which can lead to a segmentation faultCVE-2013-3718Fix available5.5 Medium
- redhat codeready linux builder, codeready linux builder eus, codeready linux builder for arm64 eus +20 more +22 moreA vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted...CVE-2019-8720In KEVFix available8.8 High
- golang go, arista cloudvision portal, eos +8 more +10 moreGo before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic...CVE-2019-17596Public exploitFix available7.5 High
- qemu, debian linux, fedoraproject fedora +2 more +4 moreThe ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service ...CVE-2019-120676.5 Medium
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 moreFrom Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or...CVE-2019-176319.1 Critical
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions...CVE-2019-2999Fix available4.7 Medium
- oracle corporation java, netapp e-series santricity os controller, e-series santricity storage manager +12 more +14 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment)....CVE-2019-29964.2 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2992Fix available3.7 Low
- oracle graalvm, oracle corporation java, netapp e-series santricity os controller +10 more +12 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2019-2989Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2988Fix available3.7 Low
- Show moreLoading…