Skip to contentRedhat Enterprise Linux Eus vulnerabilities
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2420Fix available4.9 Medium
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux...CVE-2019-3460Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreA heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel...CVE-2019-3459Fix available6.5 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...CVE-2018-20685Fix available5.3 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +8 more +10 moreIn Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ...CVE-2018-20662Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreA reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of...CVE-2018-20650Fix available6.5 Medium
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +6 more +8 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer...CVE-2018-8787Fix available9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +15 more +17 morePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18311Fix availableEPSS 11.7%9.8 Critical
- node.js, redhat enterprise linux, enterprise linux desktop +5 more +7 moreNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...CVE-2018-12121Fix availableEPSS 10.2%7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection...CVE-2019-2503Fix available6.4 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace:...CVE-2018-18897Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3214Fix available5.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3183Fix available9.0 Critical
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3180Fix available5.6 Medium
- canonical ubuntu linux, debian linux, hp xp7 command view +10 more +12 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-3169Fix available8.3 High
- oracle jrockit, oracle corporation java, canonical ubuntu linux +12 more +14 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-3149Fix available8.3 High
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3139Fix available3.1 Low
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-3136Fix available3.4 Low
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreA security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in...CVE-2018-14633Fix available7.0 High
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreA denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2....CVE-2017-15705Fix available5.3 Medium
- libvirt, redhat enterprise linux, enterprise linux desktop +7 more +9 morelibvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...CVE-2015-5160Fix available5.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +24 more +26 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2952Fix available3.7 Low
- arm cortex-a, cortex-r, fujitsu m12-1 firmware +223 more +225 moreSystems with microprocessors utilizing speculative execution and branch prediction may allow...CVE-2018-3693Fix available5.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreThe inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users...CVE-2018-13405Public exploitFix available7.8 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-2767Fix available3.1 Low
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 Medium
- xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 morebark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393Fix available7.5 High
- xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 moremapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of...CVE-2018-10392Fix available8.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-2819Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2817Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2781Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking)....CVE-2018-2771Fix available4.4 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-2761Fix available5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2018-2755Fix available7.7 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the...CVE-2018-1312Fix availableEPSS 15.8%9.8 Critical
- qos slf4j, oracle goldengate application adapters, goldengate stream analytics +10 more +12 moreImproper Access Control in SLF4JCVE-2018-8088Fix availableEPSS 14.7%9.8 Critical
- oracle corporation java, oracle jdk, jre +5 more +7 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2018-26398.3 High
- oracle corporation java, netapp active iq unified manager, cloud backup +22 more +24 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2018-26388.3 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2668Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2665Fix available6.5 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2640Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2622Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition)....CVE-2018-2562Fix available7.1 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA use-after-free vulnerability was found in network namespaces code affecting the Linux kernel...CVE-2017-15129Fix available4.7 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- mozilla thunderbird, debian linux, redhat enterprise linux aus +4 more +6 moreCrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....CVE-2017-7847Fix available4.3 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +5 more +7 moreIt is possible to spoof the sender's email address and display an arbitrary sender address to the...CVE-2017-7829Fix available5.3 Medium
- Show moreLoading…