Skip to contentRedhat Linux vulnerabilities
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 Low
- libreoffice, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreLibreOffice 4.2.4 executes unspecified VBA macros automatically, which has unspecified impact and...CVE-2014-0247Fix available10.0 High
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 uses 0775 permissions for /tmp/diagSEsnap and does not properly restrict...CVE-2014-4039Fix available2.1 Low
- ppc64-diag project ppc64-diag, redhat enterprise linux server, suse linux enterprise server +2 moreppc64-diag 2.6.1 allows local users to overwrite arbitrary files via a symlink attack related to ...CVE-2014-4038Fix available4.4 Medium
- redhat enterprise linuxA certain tomcat7 package for Apache Tomcat 7 in Red Hat Enterprise Linux (RHEL) 7 allows remote...CVE-2014-01865.0 Medium
- fedoraproject sssd, redhat enterprise linux +1 moreThe System Security Services Daemon (SSSD) 1.11.6 does not properly identify group membership...CVE-2014-0249Fix available3.3 Low
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreThe Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which...CVE-2014-3940Fix available4.0 Medium
- gnu gnutls, debian linux, redhat enterprise linux +2 moreGnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a...CVE-2015-0294Fix available7.5 High
- gnu libtasn1, debian linux, gnu gnutls +11 more +13 moreThe (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows...CVE-2014-3469Fix available5.0 Medium
- gnu libtasn1, debian linux, f5 arx firmware +12 more +14 moreThe asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a...CVE-2014-3468Fix available7.5 High
- gnu gnutls, libtasn1, debian linux +12 more +14 moreMultiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in...CVE-2014-3467Fix available5.0 Medium
- redhat libvirt, opensuse, redhat enterprise linux +1 more +3 morelibvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read...CVE-2014-0179Fix available1.9 Low
- rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 moreactionpack Path Traversal vulnerabilityCVE-2014-0130In KEVPublic exploitFix availableEPSS 53.7%7.5 High
- virt-who project virt-who, redhat enterprise linux desktop, enterprise linux server +1 more +3 morevirt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to...CVE-2014-0189Fix available2.1 Low
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul...CVE-2014-1532Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreUse-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeightForImage function in...CVE-2014-1531Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1530Fix available6.1 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5,...CVE-2014-1529Fix available8.8 High
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreThe nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24...CVE-2014-1524Fix available9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreHeap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR...CVE-2014-1523Fix available6.5 Medium
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 29.0,...CVE-2014-1518Fix available8.8 High
- qemu, redhat enterprise linux +1 moreInteger overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and...CVE-2014-0150Fix available4.9 Medium
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5...CVE-2014-2440Fix available5.1 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...CVE-2014-2438Fix available3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2436Fix available6.5 Medium
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and...CVE-2014-2432Fix available2.8 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2431Fix available2.6 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2430Fix available3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...CVE-2014-2419Fix available4.0 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5...CVE-2014-0384Fix available4.0 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 moreThe (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle...CVE-2014-0160In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- qemu, xen, redhat enterprise linux +2 moreBuffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen,...CVE-2011-3346Fix available4.0 Medium
- redhat conga, enterprise linux +1 moreLuci in Red Hat Conga does not properly enforce the user session timeout, which might allow...CVE-2013-73473.7 Low
- redhat conga, enterprise linux +1 moreLuci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the...CVE-2012-3359Fix available3.7 Low
- qemu, fedoraproject fedora, redhat enterprise linux desktop +7 more +9 moreQemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW...CVE-2014-0147Fix available6.2 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are...CVE-2014-0144Fix available8.6 High
- qemu, redhat enterprise linux +1 moreMultiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users...CVE-2014-0143Fix available7.0 High
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...CVE-2014-2497Fix availableEPSS 20.3%4.3 Medium
- mozilla firefox, seamonkey, thunderbird +13 more +15 morevmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15149.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreTypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird...CVE-2014-15138.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreUse-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox...CVE-2014-1512EPSS 29.1%10.0 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey...CVE-2014-1511Public exploitEPSS 83.5%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-1510Public exploitEPSS 82.2%9.8 Critical
- mozilla firefox, seamonkey, thunderbird +12 more +14 moreBuffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla...CVE-2014-15098.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x...CVE-2014-15089.1 Critical
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,...CVE-2014-15057.5 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreThe mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24...CVE-2014-14978.8 High
- mozilla firefox, seamonkey, thunderbird +13 more +15 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0,...CVE-2014-14939.8 Critical
- qemu, redhat enterprise linux, enterprise linux server supplementary +2 moreBuffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in...CVE-2011-4111Fix available6.8 Medium
- Show moreLoading…