Skip to contentRedhat Enterprise Linux Desktop vulnerabilities
- pcre, fedoraproject fedora, oracle linux +7 more +9 moreThe pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting,...CVE-2015-8391Fix available9.8 Critical
- qemu, debian linux, redhat enterprise linux desktop +5 more +7 moreBuffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a...CVE-2015-7512Fix available9.0 Critical
- imagemagick, oracle linux, redhat enterprise linux desktop +5 more +7 moreInteger truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers...CVE-2015-8896Fix available6.5 Medium
- tigervnc, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreXRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer...CVE-2014-8241Fix available9.8 Critical
- ibm java 2 sdk, java sdk, redhat enterprise linux desktop +6 more +8 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3...CVE-2015-50062.1 Low
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...CVE-2015-7500Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...CVE-2015-7498Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...CVE-2015-7497Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerabilityCVE-2015-5312Fix available7.1 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 Medium
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- libpng, canonical ubuntu linux, debian linux +7 more +9 moreThe png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,...CVE-2015-7981Fix available5.0 Medium
- ntp, debian linux, netapp clustered data ontap +10 more +12 morentpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a...CVE-2015-7852Fix availableEPSS 12.3%5.9 Medium
- ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77...CVE-2015-7703Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7702Fix available6.5 Medium
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreMemory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4...CVE-2015-7701Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7692Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7691Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4913Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4879Fix available4.6 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4870Public exploitFix availableEPSS 30.1%4.0 Medium
- oracle mysql, canonical ubuntu linux, mariadb +7 more +9 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4864Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4861Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4858Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4836Fix available2.8 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4826Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4819Fix available7.2 High
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated...CVE-2015-4816Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4815Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4802Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4792Fix available1.7 Low
- adobe flash player, opensuse evergreen, opensuse +7 more +9 moreAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...CVE-2015-7645In KEVPublic exploitFix availableEPSS 65.3%7.8 High
- redhat enterprise linux, enterprise mrg, kernel-rt +3 more +5 moreThe Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when...CVE-2015-7837Fix available5.5 Medium
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to...CVE-2015-5261Fix available7.1 High
- redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of...CVE-2015-5235Fix available4.3 Medium
- redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which...CVE-2015-5234Fix available6.8 Medium
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of...CVE-2015-5260Fix available7.8 High
- spice project spice, redhat enterprise linux, enterprise linux desktop +3 more +5 moreRace condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote...CVE-2015-3247Fix available6.9 Medium
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +5 more +7 morentp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of...CVE-2015-5195Public exploitFix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- Show moreLoading…