Skip to contentRedhat Linux vulnerabilities
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0353Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0352Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0351Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0350Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0349Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreBuffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169...CVE-2015-0348Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0347Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreDouble free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17...CVE-2015-0346Fix availableEPSS 10.4%10.0 High
- qemu, redhat enterprise linux desktop, enterprise linux eus +4 more +6 moreThe host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration,...CVE-2014-7840Fix available7.5 High
- gnu gnutls, canonical ubuntu linux, opensuse +4 more +6 moreThe _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x...CVE-2014-8564Fix available5.0 Medium
- libreoffice, canonical ubuntu linux, opensuse +3 more +5 moreUse-after-free vulnerability in the socket manager of Impress Remote in LibreOffice 4.x before 4...CVE-2014-3693Fix available7.5 High
- zend framework, fedoraproject fedora, redhat enterprise linux +2 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpcCVE-2014-8089Fix available9.8 Critical
- ruby-lang ruby, canonical ubuntu linux, opensuse +1 more +3 moreThe REXML parser in Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4...CVE-2014-8080Fix available5.0 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...CVE-2014-7815Fix available5.0 Medium
- qemu, redhat enterprise linux desktop, enterprise linux eus +6 more +8 moreQemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other...CVE-2014-0148Fix available5.5 Medium
- php, redhat enterprise linux +1 moreThe php_pgsql_meta_data function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP before...CVE-2015-4644Fix available7.5 High
- php, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before...CVE-2015-4643Fix availableEPSS 15.4%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x...CVE-2015-4603Fix availableEPSS 10.6%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5...CVE-2015-4602Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 morePHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or...CVE-2015-4601Fix available9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapClient implementation in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8...CVE-2015-4600Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux desktop, enterprise linux hpc node +4 more +6 moreThe SoapFault::__toString method in ext/soap/soap.c in PHP before 5.4.40, 5.5.x before 5.5.24,...CVE-2015-4599Fix availableEPSS 10.3%9.8 Critical
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames...CVE-2015-4598Fix available6.5 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x...CVE-2015-4148Public exploitFix availableEPSS 19.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9...CVE-2015-4026Fix availableEPSS 18.8%7.5 High
- php, apple mac os x, hp system management homepage +9 more +11 moreAlgorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c...CVE-2015-4024Fix availableEPSS 41.8%5.0 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 moreInteger overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before...CVE-2015-4022Fix availableEPSS 20.1%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and...CVE-2015-4021Fix availableEPSS 20.5%5.0 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3412Fix available5.3 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 morePHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames...CVE-2015-3411Fix available6.5 Medium
- php, apple mac os x, oracle linux +8 more +10 moreMultiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP...CVE-2015-3329Fix availableEPSS 38.2%7.5 High
- php, apple mac os x, opensuse +6 more +8 moreUse-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer...CVE-2015-2787Fix availableEPSS 11.8%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote...CVE-2015-2783Fix available5.8 Medium
- php, apple mac os x, canonical ubuntu linux +8 more +10 moreUse-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5...CVE-2015-2301Fix availableEPSS 14.7%7.5 High
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2015-0412Fix available7.2 High
- oracle jrockit, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5...CVE-2015-0410Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0408Fix available10.0 High
- canonical ubuntu linux, debian linux, fedoraproject fedora +3 more +5 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0407Fix available5.0 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise server +4 more +6 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers...CVE-2015-0395Fix available9.3 High
- oracle jrockit, canonical ubuntu linux, debian linux +7 more +9 moreUnspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71...CVE-2015-0383Fix available5.4 Medium
- canonical ubuntu linux, debian linux, novell suse linux enterprise desktop +5 more +7 moreUnspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to...CVE-2014-6601Fix available10.0 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreRace condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM...CVE-2014-3611Fix available4.7 Medium
- xmlsoft libxml2, apple mac os x, canonical ubuntu linux +2 more +4 moreparser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity...CVE-2014-3660Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google...CVE-2014-3198Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe SessionService::GetLastSession function in browser/sessions/session_service.cc in Google...CVE-2014-3193Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome...CVE-2014-3189Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreMultiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to...CVE-2014-3200Fix available7.5 High
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as...CVE-2014-3199Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreThe NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in...CVE-2014-3197Fix available5.0 Medium
- google chrome, redhat enterprise linux desktop supplementary, enterprise linux server supplementary +2 more +4 moreGoogle V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap...CVE-2014-3195Fix available5.0 Medium
- Show moreLoading…