Skip to contentRedhat Enterprise Linux Server vulnerabilities
- php, apple mac os x, redhat enterprise linux +6 more +8 moreext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...CVE-2015-2783Fix available5.8 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google...CVE-2014-3198Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe SessionService::GetLastSession function in browser/sessions/session_service.cc in Google...CVE-2014-3193Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome...CVE-2014-3189Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to...CVE-2014-3200Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as...CVE-2014-3199Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in...CVE-2014-3197Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreGoogle V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap...CVE-2014-3195Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125...CVE-2014-3194Fix available7.5 High
- google chrome, apple iphone os, itunes +6 more +8 moreUse-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom...CVE-2014-3192Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows...CVE-2014-3191Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreUse-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in...CVE-2014-3190Fix available7.5 High
- google chrome, chrome os, redhat enterprise linux desktop supplementary +3 more +5 moreGoogle Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the...CVE-2014-3188Fix available10.0 High
- qemu, canonical ubuntu linux, debian linux +4 more +6 moreThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...CVE-2014-3640Fix available2.1 Low
- qemu, canonical ubuntu linux, debian linux +9 more +11 moreThe VGA emulator in QEMU allows local guest users to read host memory by setting the display to a...CVE-2014-3615Fix available2.1 Low
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS...CVE-2014-7145Fix available7.8 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreRace condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel...CVE-2014-9529Fix available6.9 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- libvncserver, debian linux, fedoraproject fedora +2 more +4 moreMultiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer...CVE-2014-6055Fix available6.5 Medium
- libvncserver, debian linux, fedoraproject fedora +3 more +5 moreInteger overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and...CVE-2014-6051Fix available7.5 High
- qemu, canonical ubuntu linux, debian linux +7 more +9 moreThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...CVE-2015-1779Fix available8.6 High
- apache http server, canonical ubuntu linux, oracle enterprise manager ops center +6 more +8 moreThe cache_merge_headers_out function in modules/cache/cache_util.c in the mod_cache module in the...CVE-2014-3581Fix availableEPSS 13.5%5.0 Medium
- apache openoffice, libreoffice, redhat enterprise linux desktop +2 more +4 moreThe OLE preview generation in Apache OpenOffice before 4.1.1 and OpenOffice.org (OOo) might allow...CVE-2014-3575Fix availableEPSS 11.3%4.3 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote...CVE-2015-0251Fix available4.0 Medium
- apache subversion, apple xcode, opensuse +6 more +8 moreThe (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through...CVE-2015-0248Fix availableEPSS 12.8%5.0 Medium
- apache subversion, apple xcode, redhat enterprise linux desktop +3 more +5 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x...CVE-2014-8108Fix available5.0 Medium
- apache subversion, apple xcode, debian linux +5 more +7 moreThe mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x...CVE-2014-3580Fix availableEPSS 11.0%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2573Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-2571Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2568Fix available5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0505Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0501Fix availableEPSS 10.3%5.7 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier,...CVE-2015-0499Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0441Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0433Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated...CVE-2015-0432Fix available4.0 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier,...CVE-2015-0391Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0382Fix availableEPSS 10.1%4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0381Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0374Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +13 more +15 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...CVE-2014-6568Fix available3.5 Low
- apache subversion, apple xcode, canonical ubuntu linux +6 more +8 moreApache Subversion 1.0.0 through 1.7.x before 1.7.17 and 1.8.x before 1.8.10 uses an MD5 hash of...CVE-2014-3528Fix available4.0 Medium
- linux kernel, redhat enterprise linux eus, enterprise linux server aus +1 more +3 moreThe mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly...CVE-2014-5045Fix available6.2 Medium
- ntp, debian linux, fedoraproject fedora +10 more +12 morentp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys...CVE-2015-3405Fix available7.5 High
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreThe acc_ctx_cont function in the SPNEGO acceptor in lib/gssapi/spnego/spnego_mech.c in MIT...CVE-2014-4344Fix available7.8 High
- mit kerberos 5, debian linux, redhat enterprise linux desktop +3 more +5 moreDouble free vulnerability in the init_ctx_reselect function in the SPNEGO initiator in lib/gssapi...CVE-2014-4343Fix available7.6 High
- mit kerberos, kerberos 5, debian linux +4 more +6 moreMIT Kerberos 5 (aka krb5) 1.7.x through 1.12.x before 1.12.2 allows remote attackers to cause a...CVE-2014-4342Fix available5.0 Medium
- mit kerberos 5, debian linux, fedoraproject fedora +7 more +9 moreMIT Kerberos 5 (aka krb5) before 1.12.2 allows remote attackers to cause a denial of service ...CVE-2014-4341Fix available5.0 Medium
- Show moreLoading…