Skip to contentRedhat Enterprise Linux Server vulnerabilities
- libpng, debian linux, fedoraproject fedora +4 more +6 moreInteger underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1...CVE-2015-8540Fix available8.8 High
- sos project sos, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreSoSReport Predictable Tmp File NamesCVE-2015-7529Fix available7.8 High
- openldap, oracle linux, redhat enterprise linux desktop +6 more +8 moreThe nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse...CVE-2015-3276Fix available7.5 High
- red hat automatic bug reporting tool, oracle linux, redhat enterprise linux +4 more +6 moreThe abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local...CVE-2015-5287In KEVPublic exploit7.8 High
- redhat automatic bug reporting tool, enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool ...CVE-2015-5273Public exploit3.6 Low
- openssl, canonical ubuntu linux, debian linux +10 more +12 moressl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when...CVE-2015-3196Fix availableEPSS 13.5%4.3 Medium
- openssl, apple mac os x, canonical ubuntu linux +21 more +23 moreThe ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0...CVE-2015-3195Public exploitFix availableEPSS 38.7%5.3 Medium
- linuxfoundation cups-filters, foomatic-filters, canonical ubuntu linux +6 more +8 moreIncomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0...CVE-2015-8327Fix availableEPSS 10.6%7.5 High
- pcre, fedoraproject fedora, oracle linux +7 more +9 moreThe pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting,...CVE-2015-8391Fix available9.8 Critical
- qemu, debian linux, redhat enterprise linux desktop +5 more +7 moreBuffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a...CVE-2015-7512Fix available9.0 Critical
- imagemagick, oracle linux, redhat enterprise linux desktop +5 more +7 moreInteger truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers...CVE-2015-8896Fix available6.5 Medium
- tigervnc, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreXRegion in TigerVNC allows remote VNC servers to cause a denial of service (NULL pointer...CVE-2014-8241Fix available9.8 Critical
- ibm java 2 sdk, java sdk, redhat enterprise linux desktop +6 more +8 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3...CVE-2015-50062.1 Low
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreThe xmlParseMisc function in parser.c in libxml2 before 2.9.3 allows context-dependent attackers...CVE-2015-7500Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreHeap-based buffer overflow in nokogiriCVE-2015-7499Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlParseXmlDecl function in parser.c in libxml2 before 2.9.3...CVE-2015-7498Fix available5.0 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in the xmlDictComputeFastQKey function in dict.c in libxml2 before 2.9...CVE-2015-7497Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +10 more +12 moreNokogiri subject to DoS via libxml2 vulnerabilityCVE-2015-5312Fix available7.1 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlParseXMLDecl function in parser.c in libxml2 before 2.9.3 allows context-dependent...CVE-2015-8317Fix available5.0 Medium
- xmlsoft libxml2, apple iphone os, mac os x +9 more +11 moreThe xmlSAX2TextNode function in SAX2.c in the push interface in the HTML parser in libxml2 before...CVE-2015-8242Fix available5.8 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +6 more +8 moreThe xmlNextChar function in libxml2 2.9.2 does not properly check the state, which allows context...CVE-2015-8241Fix available6.4 Medium
- libpng, apple mac os x, canonical ubuntu linux +16 more +18 moreMultiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before...CVE-2015-8126Fix availableEPSS 10.3%7.5 High
- libpng, canonical ubuntu linux, debian linux +7 more +9 moreThe png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,...CVE-2015-7981Fix available5.0 Medium
- ntp, debian linux, netapp clustered data ontap +10 more +12 morentpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a...CVE-2015-7852Fix availableEPSS 12.3%5.9 Medium
- ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77...CVE-2015-7703Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7702Fix available6.5 Medium
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreMemory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4...CVE-2015-7701Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7692Fix available7.5 High
- ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7691Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +16 more +18 moreThe panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the...CVE-2015-5300Fix available7.5 High
- oracle java se, opensuse leap, opensuse +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to...CVE-2015-4902In KEVEPSS 13.6%5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4913Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4879Fix available4.6 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4870Public exploitFix availableEPSS 30.1%4.0 Medium
- oracle mysql, canonical ubuntu linux, mariadb +7 more +9 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4864Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4861Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4858Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier,...CVE-2015-4836Fix available2.8 Low
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4830Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4826Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier,...CVE-2015-4819Fix available7.2 High
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier allows remote authenticated...CVE-2015-4816Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4815Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4802Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +11 more +13 moreUnspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows...CVE-2015-4792Fix available1.7 Low
- adobe flash player, opensuse evergreen, opensuse +7 more +9 moreAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11...CVE-2015-7645In KEVPublic exploitFix availableEPSS 65.3%7.8 High
- redhat enterprise linux, enterprise mrg, kernel-rt +3 more +5 moreThe Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when...CVE-2015-7837Fix available5.5 Medium
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to...CVE-2015-5261Fix available7.1 High
- redhat icedtea, fedoraproject fedora, opensuse +4 more +6 moreIcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of...CVE-2015-5235Fix available4.3 Medium
- Show moreLoading…