Skip to contentRedhat Enterprise Linux Eus vulnerabilities
- oracle mysql, oracle corporation mysql server, debian linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump)....CVE-2017-3651Fix available4.3 Medium
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...CVE-2017-7668Fix availableEPSS 57.5%7.5 High
- apache http server, apple mac os x, debian linux +11 more +13 moreIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...CVE-2017-3167Fix availableEPSS 20.2%9.8 Critical
- openldap, debian linux, mcafee policy auditor +7 more +9 moreservers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free...CVE-2017-9287Fix available6.5 Medium
- artifex ghostscript, debian linux, redhat enterprise linux desktop +5 more +7 moreArtifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ...CVE-2017-8291In KEVPublic exploitFix availableEPSS 97.0%7.8 High
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3456Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3453Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3309Fix available7.7 High
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3308Fix available7.7 High
- gstreamer, debian linux, redhat enterprise linux desktop +5 more +7 moreThe gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in...CVE-2017-5848Fix available7.5 High
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Error Handling...CVE-2017-3318Fix available4.0 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Logging). Supported...CVE-2017-3317Fix available4.0 Medium
- oracle mysql, mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: MyISAM)....CVE-2017-3313Fix available4.7 Medium
- oracle mysql, debian linux, mariadb +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3291Fix available6.3 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging)....CVE-2017-3265Fix available5.6 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2017-3258Fix available6.5 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2017-3244Fix available6.5 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets)....CVE-2017-3243Fix available4.4 Medium
- oracle mysql, mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-3238Fix available6.5 Medium
- isc bind, debian linux, netapp data ontap edge +9 more +11 morenamed in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2...CVE-2016-9131Fix availableEPSS 40.6%7.5 High
- apache http server, debian linux, netapp clustered data ontap +8 more +10 moreApache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace...CVE-2016-8743Fix availableEPSS 13.3%7.5 High
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- mozilla firefox, firefox esr, redhat enterprise linux aus +4 more +6 moreHTML tags received from the Pocket server will be processed without sanitization and any...CVE-2016-9901Fix available9.8 Critical
- jasper project jasper, debian linux, redhat enterprise linux desktop +5 more +7 moreStack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1...CVE-2016-9560Fix available7.8 High
- gstreamer, debian linux, fedoraproject fedora +6 more +8 moreThe windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE...CVE-2016-9811Fix available4.7 Medium
- gstreamer, fedoraproject fedora, redhat enterprise linux desktop +5 more +7 moreThe vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote...CVE-2016-9446Fix available7.5 High
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...CVE-2016-8864Fix availableEPSS 38.7%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-5629Fix available4.9 Medium
- oracle mysql, mariadb, redhat enterprise linux eus +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-5626Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to...CVE-2016-5624Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and...CVE-2016-5612Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-3492Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreRace condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to...CVE-2016-5195In KEVPublic exploitFix availableEPSS 83.5%7.0 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +6 more +8 moreInteger overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers...CVE-2016-7163Fix available7.8 High
- isc bind, fedoraproject fedora, hp hp-ux +6 more +8 moreISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or...CVE-2016-2775Fix availableEPSS 63.3%5.9 Medium
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- kernel util-linux, ibm power hardware management console, powerkvm +6 more +8 moreThe parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows...CVE-2016-5011Fix available4.6 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local...CVE-2016-5126Fix available7.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- oracle mysql, mariadb, opensuse leap +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect...CVE-2016-0651Fix available5.5 Medium
- Show moreLoading…