Skip to contentRedhat Enterprise Linux For Power Big Endian vulnerabilities
- debian linux, linux kernel, fedoraproject fedora +15 more +17 moreUse-after-free in Linux kernel's netfilter: nf_tables componentCVE-2024-1086In KEVPublic exploitFix availableEPSS 28.1%7.8 High
- x.org xwayland, fedoraproject fedora, red hat enterprise linux 6 +13 more +15 moreXorg-x11-server: selinux context corruptionCVE-2024-0409Fix available7.8 High
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreXorg-x11-server: selinux unlabeled glx pbufferCVE-2024-0408Fix available5.5 Medium
- freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 moreIpa: invalid csrf protectionCVE-2023-5455Fix available6.5 Medium
- postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 morePostgresql: buffer overrun from integer overflow in array modificationCVE-2023-5869Fix available8.8 High
- redhat insights-client, red hat enterprise linux 6, enterprise linux 7 +29 more +31 moreInsights-client: unsafe handling of temporary files and directoriesCVE-2023-3972Fix available7.8 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +25 more +27 moreXorg-x11-server: out-of-bounds write in xichangedeviceproperty/rrchangeoutputpropertyCVE-2023-5367Fix available7.8 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalationCVE-2023-4911In KEVPublic exploitFix availableEPSS 63.8%7.8 High
- redhat subscription-manager, fedoraproject fedora, red hat enterprise linux 6 +30 more +32 moreSubscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configurationCVE-2023-3899Fix available7.8 High
- x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 moreA vulnerability was found in X.Org. This issue occurs due to a dangling pointer in...CVE-2023-0494Fix available7.8 High
- fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 moresssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersCVE-2022-4254Fix available8.8 High
- port389 389-ds-base, redhat enterprise linux desktop, enterprise linux for ibm z systems +5 more +7 moreA double-free was found in the way 389-ds-base handles virtual attributes context in persistent...CVE-2021-4091Fix available7.5 High
- samba, canonical ubuntu linux, debian linux +20 more +22 moreThe Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced...CVE-2021-44142Public exploitFix availableEPSS 73.6%8.8 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +35 more +37 moreImportant: kernel security, bug fix, and enhancement updateCVE-2022-0330Fix available7.8 High
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 moreA local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec...CVE-2021-4034In KEVPublic exploitFix availableEPSS 94.9%7.8 High
- samba, canonical ubuntu linux, debian linux +14 more +16 moreA flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos...CVE-2020-25719Fix available7.2 High
- samba, canonical ubuntu linux, debian linux +22 more +24 moreA flaw was found in the way Samba maps domain users to local users. An authenticated attacker...CVE-2020-25717Fix available8.1 High
- samba, canonical ubuntu linux, debian linux +21 more +23 moreA flaw was found in the way samba implemented SMB1 authentication. An attacker could use this...CVE-2016-2124Fix available5.9 Medium
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- kernel kvm, linux kernel, fedoraproject fedora +24 more +26 moreImportant: kernel security, bug fix, and enhancement updateCVE-2021-3656Public exploitFix available8.8 High
- openslp, vmware esxi, horizon daas +14 more +16 moreOpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has...CVE-2019-5544In KEVPublic exploitFix availableEPSS 98.1%9.8 Critical
- redhat codeready linux builder, codeready linux builder eus, codeready linux builder for arm64 eus +20 more +22 moreA vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted...CVE-2019-8720In KEVFix available8.8 High
- php, canonical ubuntu linux, debian linux +21 more +23 moreUnderflow in PHP-FPM can lead to RCECVE-2019-11043In KEVPublic exploitFix availableEPSS 99.8%8.7 High
- debian linux, linux kernel, canonical ubuntu linux +36 more +38 moreThere is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell...CVE-2019-14816Fix available5.5 Medium
- isc dhcpd, opensuse leap, redhat enterprise linux +16 more +18 moredhcpd: use-after-free error leads crash in IPv6 mode when using mismatched BIND librariesCVE-2019-6470Fix available6.5 Medium
- systemd project systemd, canonical ubuntu linux, debian linux +19 more +21 moreAn issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus...CVE-2019-6454Fix available5.5 Medium
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- rsyslog, debian linux, redhat enterprise linux desktop +10 more +12 moreA denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could...CVE-2018-16881Fix available5.3 Medium
- systemd, canonical ubuntu linux, debian linux +18 more +20 moreAn out of bounds read was discovered in systemd-journald in the way it parses log messages that...CVE-2018-16866Fix available4.3 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA use-after-free vulnerability was found in network namespaces code affecting the Linux kernel...CVE-2017-15129Fix available4.7 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 moreWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the serverCVE-2017-12615In KEVPublic exploitFix availableEPSS 99.7%8.1 High
- uclouvain openjpeg, redhat enterprise linux, enterprise linux for ibm z systems +2 more +4 moreopenjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045. A crafted...CVE-2016-96757.8 High
- mozilla firefox, canonical ubuntu linux, debian linux +18 more +20 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and...CVE-2016-2818Fix available8.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- linux kernel, redhat enterprise linux compute node eus, enterprise linux for ibm z systems eus +3 more +5 moreRace condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel...CVE-2015-4170Fix available4.7 Medium
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...CVE-2015-3405Fix available7.5 High
- mozilla firefox, thunderbird, thunderbird esr +15 more +17 moreMozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and...CVE-2013-1675In KEV6.5 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +8 more +10 moreMultiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in...CVE-2012-2665Fix available7.5 High
- oracle jre, jdk, redhat enterprise linux desktop +14 more +16 moreUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...CVE-2012-17172.1 Low
- oracle linux, redhat enterprise linux, centos +6 more +8 moreRed Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable...CVE-2007-62834.9 Medium
- debian linux, fedoraproject fedora core, redhat enterprise linux +5 more +7 morepam_ldap in nss_ldap on Red Hat Enterprise Linux 4, Fedora Core 3 and earlier, and possibly other...CVE-2006-5170Fix available7.5 High