Skip to contentRedhat Enterprise Linux Server vulnerabilities
- ruby-lang ruby, canonical ubuntu linux, debian linux +4 more +6 moreOff-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1...CVE-2014-4975Fix available5.0 Medium
- libreoffice, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreLibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and...CVE-2014-0247Fix available10.0 High
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict...CVE-2014-4039Fix available2.1 Low
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to ...CVE-2014-4038Fix available4.4 Medium
- gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 Medium
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 High
- gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 Medium
- rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 moreactionpack Path Traversal vulnerabilityCVE-2014-0130In KEVPublic exploitFix availableEPSS 53.7%7.5 High
- virt-who project virt-who, redhat enterprise linux desktop, enterprise linux server +1 more +3 morevirt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to...CVE-2014-0189Fix available2.1 Low
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5...CVE-2014-2440Fix available5.1 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...CVE-2014-2438Fix available3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2436Fix available6.5 Medium
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and...CVE-2014-2432Fix available2.8 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2431Fix available2.6 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2430Fix available3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...CVE-2014-2419Fix available4.0 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5...CVE-2014-0384Fix available4.0 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- qemu, fedoraproject fedora, redhat enterprise linux desktop +7 more +9 moreQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...CVE-2014-0147Fix available6.2 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are...CVE-2014-0144Fix available8.6 High
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...CVE-2014-2497Fix availableEPSS 20.3%4.3 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x...CVE-2014-15089.1 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-15057.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24...CVE-2014-14978.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0,...CVE-2014-14939.8 Critical
- qemu, redhat enterprise linux, enterprise linux server supplementary +2 moreBuffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in...CVE-2011-4111Fix available6.8 Medium
- adobe air, air sdk, flash player +7 more +9 moreDouble free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x...CVE-2014-0502In KEVEPSS 24.8%8.8 High
- qemu, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreThe virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers...CVE-2013-4535Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3,...CVE-2014-14877.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0,...CVE-2014-14869.8 Critical
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreRasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before...CVE-2014-14828.8 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreMozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey...CVE-2014-14817.5 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreThe System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x...CVE-2014-14797.5 High
- mozilla firefox, seamonkey, thunderbird +14 more +16 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0,...CVE-2014-14779.8 Critical
- linux kernel, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreThe cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not...CVE-2014-0069Fix available7.2 High
- adobe flash player, google chrome, opensuse +6 more +8 moreInteger underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0...CVE-2014-0497In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- Show moreLoading…