Skip to contentRedhat Enterprise Linux Eus vulnerabilities
- debian linux, linuxptp project linuxptp, fedoraproject fedora +4 more +6 moreA flaw was found in the ptp4l program of the linuxptp package. A missing length check when...CVE-2021-3570Fix available8.8 High
- linux kernel, netapp h300e firmware, h300s firmware +29 more +31 more.A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker...CVE-2021-3609Fix available7.0 High
- dogtagpki, fedoraproject fedora, oracle linux +9 more +11 moreA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores...CVE-2021-3551Fix available7.8 High
- redhat libvirt, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 moreAn information disclosure vulnerability was found in libvirt in versions before 6.3.0. HTTP...CVE-2020-143016.5 Medium
- red hat, inc. spice, canonical ubuntu linux, debian linux +7 more +9 moreMultiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the...CVE-2020-14355Fix available6.6 Medium
- microsoft asp.net core, fedoraproject fedora, microsoft asp.net core 2.1 +5 more +7 moreMicrosoft ASP.NET Core Security Feature Bypass VulnerabilityCVE-2020-1045Fix available7.5 High
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A...CVE-2020-14311Fix available5.7 Medium
- gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 moreThere is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a...CVE-2020-14310Fix available5.7 Medium
- nodejs node, debian linux, nodejs node.js +5 more +7 moreIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...CVE-2019-15606Fix availableEPSS 20.0%9.8 Critical
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...CVE-2019-15604Fix availableEPSS 20.0%7.5 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...CVE-2019-15605Public exploitFix availableEPSS 57.1%9.8 Critical
- redhat enterprise linux, red hat kpatch:, redhat enterprise linux eus +2 moreIt was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix...CVE-2019-19339Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2659Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-2654Fix available3.7 Low
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2601Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2593Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2590Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-2583Fix available3.7 Low
- microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 moreRemote code execution in ASP.NET CoreCVE-2020-0603Fix availableEPSS 22.6%8.8 High
- microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 moreDenial of service in ASP.NET CoreCVE-2020-0602Fix available7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +9 more +11 moreOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in...CVE-2020-6851Fix available7.5 High
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- apache software foundation xerces-c, apache xerces-c\+\+, debian linux +8 more +10 moreThe Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during...CVE-2018-1311Public exploitFix available8.1 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreArbitrary File Overwrite in npm CLICVE-2019-16777Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16776Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16775Fix available7.7 High
- google chrome, canonical ubuntu linux, debian linux +12 more +14 moreOut of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13734Fix available8.8 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +157 more +159 moreTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an...CVE-2019-11135Fix available6.5 Medium
- redhat codeready linux builder, codeready linux builder eus, codeready linux builder for arm64 eus +20 more +22 moreA vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted...CVE-2019-8720In KEVFix available8.8 High
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +5 more +7 moreFrom Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or...CVE-2019-176319.1 Critical
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions...CVE-2019-2999Fix available4.7 Medium
- oracle corporation java, netapp e-series santricity os controller, e-series santricity storage manager +12 more +14 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment)....CVE-2019-29964.2 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2992Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2988Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2019-2983Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2019-2981Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2019-2978Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting)....CVE-2019-2975Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +18 more +20 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)....CVE-2019-2973Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)...CVE-2019-2964Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)....CVE-2019-2962Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +17 more +19 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2019-2945Fix available3.1 Low
- dogtag jss, jss cryptomanager project cryptomanager, redhat enterprise linux +6 more +8 moreA flaw was found in the "Leaf and Chain" OCSP policy implementation in JSS' CryptoManager...CVE-2019-14823Fix available6.8 Medium
- sudo project sudo, canonical ubuntu linux, debian linux +12 more +14 moreIn Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain...CVE-2019-14287Public exploitFix availableEPSS 63.8%8.8 High
- golang go, debian linux, fedoraproject fedora +6 more +8 moreGo before 1.12.10 and 1.13.x before 1.13.1 allow HTTP Request Smuggling.CVE-2019-16276Fix available7.5 High
- docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 moreIncorrect Authorization in runcCVE-2019-16884Fix available7.5 High
- Show moreLoading…