Skip to contentRedhat Enterprise Linux Server vulnerabilities
- apache http server, apple mac os x, debian linux +12 more +14 moreIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...CVE-2017-9788Fix availableEPSS 56.8%9.1 Critical
- freedesktop libice, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local...CVE-2017-2626Fix available5.2 Medium
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized dynamic updatesCVE-2017-3143Public exploitFix availableEPSS 18.2%7.5 High
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized zone transfersCVE-2017-3142Fix available5.3 Medium
- debian linux, linux kernel, [unknown] kernel: +7 more +9 moreA flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the...CVE-2017-7518Fix available5.5 Medium
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler...CVE-2017-9776Fix available7.8 High
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreStack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers...CVE-2017-9775Fix available6.5 Medium
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...CVE-2017-7668Fix availableEPSS 57.5%7.5 High
- apache http server, apple mac os x, debian linux +11 more +13 moreIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...CVE-2017-3167Fix availableEPSS 20.2%9.8 Critical
- gnu glibc, debian linux, mcafee web gateway +17 more +19 moreglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate...CVE-2017-1000366Public exploitFix available7.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac...CVE-2017-5089Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac,...CVE-2017-5088Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux,...CVE-2017-5087Fix available8.8 High
- mozilla firefox, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreWhen entered directly, Reader Mode did not strip the username and password section of URLs...CVE-2017-7762Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreAn out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio...CVE-2017-7758Fix available9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL...CVE-2017-7754Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during specific user interactions with the input method editor ...CVE-2017-7752Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with content viewer listeners that results in a potentially...CVE-2017-7751Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during video control operations when a "<track>" element holds a...CVE-2017-7750Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when using an incorrect URL during the reloading of a docshell....CVE-2017-7749Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with the frameloader during tree reconstruction while regenerating...CVE-2017-5472Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed...CVE-2017-5470Fix available9.8 Critical
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...CVE-2016-54167.5 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...CVE-2016-5405Fix available9.8 Critical
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and...CVE-2017-5086Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows,...CVE-2017-5083Fix available4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreLack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for...CVE-2017-5081Fix available3.3 Low
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows,...CVE-2017-5079Fix available4.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to...CVE-2017-5078Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for...CVE-2017-5077Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac,...CVE-2017-5076Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for...CVE-2017-5075Fix available4.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreUse after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux,...CVE-2017-5073Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux...CVE-2017-5071Fix available6.3 Medium
- google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 moreType confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0...CVE-2017-5070In KEVFix availableEPSS 32.1%8.8 High
- mercurial, debian linux, redhat enterprise linux desktop +5 more +7 moreMercurial has Incorrect Permission Assignment for Critical ResourceCVE-2017-9462Public exploitFix availableEPSS 21.7%8.8 High
- samba, debian linux, redhat enterprise linux desktop +5 more +7 moresmbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability ...CVE-2017-9461Fix available6.5 Medium
- openldap, debian linux, mcafee policy auditor +7 more +9 moreservers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free...CVE-2017-9287Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac,...CVE-2017-5068Fix available7.5 High
- [unknown] 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux desktop +2 more +4 more389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference...CVE-2017-2668Fix available6.5 Medium
- artifex ghostscript, debian linux, redhat enterprise linux desktop +5 more +7 moreArtifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ...CVE-2017-8291In KEVPublic exploitFix availableEPSS 97.0%7.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for...CVE-2017-5069Fix available6.1 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux,...CVE-2017-5067Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient consistency checks in signature handling in the networking stack in Google Chrome...CVE-2017-5066Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreLack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81...CVE-2017-5065Fix available4.7 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac,...CVE-2017-5063Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and...CVE-2017-5062Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac...CVE-2017-5061Fix available5.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac,...CVE-2017-5060Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreType confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and...CVE-2017-5059Fix available8.8 High
- Show moreLoading…