Skip to contentRedhat Enterprise Linux Desktop vulnerabilities
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in...CVE-2014-3190Fix available7.5 High
- google chrome, chrome os, redhat enterprise linux desktop supplementary +3 more +5 moreGoogle Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the...CVE-2014-3188Fix available10.0 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...CVE-2014-3640Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...CVE-2014-7145Fix available7.8 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreRace condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel...CVE-2014-9529Fix available6.9 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 Medium
- apache openoffice, libreoffice, redhat enterprise linux desktop +2 more +4 moreThe OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow...CVE-2014-3575Fix availableEPSS 11.3%4.3 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote...CVE-2015-0251Fix available4.0 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through...CVE-2015-0248Fix availableEPSS 12.8%5.0 Medium
- apache subversion, apple xcode, redhat enterprise linux desktop +3 more +5 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x...CVE-2014-8108Fix available5.0 Medium
- apache subversion, apple xcode, debian linux +5 more +7 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x...CVE-2014-3580Fix availableEPSS 11.0%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2573Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-2571Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2568Fix available5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0505Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0501Fix availableEPSS 10.3%5.7 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0499Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0441Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0433Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated...CVE-2015-0432Fix available4.0 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2015-0391Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0382Fix availableEPSS 10.1%4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0381Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0374Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...CVE-2014-6568Fix available3.5 Low
- apache subversion, apple xcode, canonical ubuntu linux +6 more +8 moreApache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of...CVE-2014-3528Fix available4.0 Medium
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...CVE-2015-3405Fix available7.5 High
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreThe acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT...CVE-2014-4344Fix available7.8 High
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreDouble free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi...CVE-2014-4343Fix available7.6 High
- mit kerberos, kerberos 5, debian linux +4 more +6 moreMIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a...CVE-2014-4342Fix available5.0 Medium
- mit kerberos 5, debian linux, fedoraproject fedora +7 more +9 moreMIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ...CVE-2014-4341Fix available5.0 Medium
- ruby-lang ruby, canonical ubuntu linux, debian linux +4 more +6 moreOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...CVE-2014-4975Fix available5.0 Medium
- libreoffice, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreLibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and...CVE-2014-0247Fix available10.0 High
- gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 Medium
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 High
- gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 Medium
- virt-who project virt-who, redhat enterprise linux desktop, enterprise linux server +1 more +3 morevirt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to...CVE-2014-0189Fix available2.1 Low
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5...CVE-2014-2440Fix available5.1 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...CVE-2014-2438Fix available3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2436Fix available6.5 Medium
- Show moreLoading…