Skip to contentRedhat Enterprise Linux Server vulnerabilities
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3717Public exploitFix availableEPSS 20.4%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3716Public exploitFix availableEPSS 11.3%3.3 Low
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- openssl, google android, redhat enterprise linux desktop +6 more +8 moreThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...CVE-2016-2108Fix availableEPSS 77.9%9.8 Critical
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...CVE-2016-2106Fix availableEPSS 27.3%7.5 High
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- linux kernel, redhat enterprise linux compute node eus, enterprise linux for ibm z systems eus +3 more +5 moreRace condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel...CVE-2015-4170Fix available4.7 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in...CVE-2016-1664Fix available4.3 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreextensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback...CVE-2016-1662Fix available9.8 Critical
- ntp, debian linux, freebsd +13 more +15 moreThe MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote...CVE-2016-2518Fix availableEPSS 15.1%5.3 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to...CVE-2016-1666Fix available9.8 Critical
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google...CVE-2016-1665Fix available6.5 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8...CVE-2016-1663Fix available8.8 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreBlink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check...CVE-2016-1661Fix available8.0 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreBlink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray...CVE-2016-1660Fix available8.8 High
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreThe asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in the ASN.1 BIO implementation in...CVE-2016-2109Fix availableEPSS 29.2%7.5 High
- oracle mysql, mariadb, opensuse leap +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect...CVE-2016-0651Fix available5.5 Medium
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- oracle jrockit, jdk, jre +9 more +11 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-0695Fix available5.9 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0642Fix available4.7 Medium
- linuxfoundation foomatic-filters, oracle linux, redhat enterprise linux +5 more +7 moreHeap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4...CVE-2010-5325Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32...CVE-2016-4020Fix available6.5 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to...CVE-2016-2857Fix available8.4 High
- redhat enterprise linux, enterprise linux desktop, enterprise linux hpc node +5 more +7 moreThe calloc function in the glibc package in Red Hat Enterprise Linux (RHEL) 6.7 and 7.2 does not...CVE-2015-5229Fix available7.5 High
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repositoryCVE-2016-3069Fix available8.8 High
- mercurial, debian linux, fedoraproject fedora +11 more +13 moreMercurial arbitrary code execution via a crafted git ext:: URLCVE-2016-3068Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 moreThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...CVE-2016-1646In KEVFix availableEPSS 48.1%8.8 High
- xmlsoft libxml2, apple iphone os, mac os x +12 more +14 moreThe xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of...CVE-2016-1762Fix available8.1 High
- oracle jdk, jre, redhat enterprise linux desktop +4 more +6 moreUnspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to...CVE-2016-0636Fix available8.1 High
- fedoraproject 389 directory server, redhat enterprise linux, enterprise linux desktop +3 more +5 moreslapd/connection.c in 389 Directory Server (formerly Fedora Directory Server) 1.3.4.x before 1.3...CVE-2016-0741Fix available7.5 High
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- mit kerberos 5, debian linux, opensuse leap +7 more +9 moreMultiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5)...CVE-2015-8631Fix available6.5 Medium
- mit kerberos 5, debian linux, opensuse leap +8 more +10 moreThe xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5)...CVE-2015-8629Fix available5.3 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreMultiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome...CVE-2016-2051Fix available9.8 Critical
- mariadb, oracle mysql, canonical ubuntu linux +10 more +12 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x...CVE-2016-0616Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0609Fix available1.7 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0608Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0606Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0600Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0598Fix available3.5 Low
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0597Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB...CVE-2016-0596Fix available4.0 Medium
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0546Fix available7.2 High
- mariadb, oracle mysql, canonical ubuntu linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and...CVE-2016-0505Fix available6.8 Medium
- openbsd openssh, debian linux, redhat enterprise linux desktop +5 more +7 moreThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...CVE-2016-1908Fix availableEPSS 13.7%9.8 Critical
- adobe air, air sdk, flash player +14 more +16 moreInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on...CVE-2015-8651In KEVFix availableEPSS 67.7%8.8 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreThe get_contents function in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C...CVE-2015-5277Fix available7.2 High
- Show moreLoading…