Skip to contentRedhat Linux vulnerabilities
- freetype, canonical ubuntu linux, debian linux +8 more +10 moresfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without...CVE-2014-9667Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreFreeType before 2.5.4 does not check for the end of the data during certain parsing actions,...CVE-2014-9664Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain...CVE-2014-9663Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +8 more +10 moretype42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete...CVE-2014-9661Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle...CVE-2014-9660Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect...CVE-2014-9658Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish...CVE-2014-9657Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and...CVE-2015-1212Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe OriginCanAccessServiceWorkers function in content/browser/service_worker...CVE-2015-1211Fix available7.5 High
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreThe V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the...CVE-2015-1210Fix available5.0 Medium
- google chrome, canonical ubuntu linux, opensuse +5 more +7 moreUse-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in...CVE-2015-1209Fix available7.5 High
- debian linux, ntp, redhat enterprise linux desktop +2 more +4 moreThe read_network_packet function in ntp_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X...CVE-2014-9751Fix available6.8 Medium
- ntp, debian linux, redhat enterprise linux desktop +2 more +4 morentp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows...CVE-2014-9750Fix available5.8 Medium
- redhat libvirt, canonical ubuntu linux, mageia +4 more +6 morelibvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the...CVE-2015-0236Fix available3.5 Low
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreThe em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the...CVE-2015-0239Fix available4.4 Medium
- google chrome, chromium, opensuse +4 more +6 moreThe SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI...CVE-2014-7941Fix available5.0 Medium
- google chrome, chromium, opensuse +4 more +6 moreGoogle Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote...CVE-2014-7939Fix available4.3 Medium
- jasper project jasper, debian linux, opensuse +1 more +3 moreMultiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote...CVE-2014-8158Fix availableEPSS 14.4%6.8 Medium
- jasper project jasper, debian linux, opensuse +1 more +3 moreOff-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote...CVE-2014-8157Fix availableEPSS 16.9%7.5 High
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of...CVE-2014-7943Fix available5.0 Medium
- google chrome, canonical ubuntu linux, chromium +5 more +7 moreThe Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a...CVE-2014-7942Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7926Fix available7.5 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 moreThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...CVE-2014-7923Fix available7.5 High
- libtiff, apple iphone os, mac os x +6 more +8 moreThe _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows...CVE-2014-8130Fix available6.5 Medium
- libtiff, apple iphone os, mac os x +5 more +7 moreLibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds write) or...CVE-2014-8129Fix available8.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreHeap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6.0 and earlier allows...CVE-2014-8141Fix available7.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreHeap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6.0 and earlier allows...CVE-2014-8140Fix available7.8 High
- info-zip unzip, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreHeap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6.0 and earlier allows...CVE-2014-8139Fix available7.8 High
- jasper project jasper, redhat enterprise linux +1 moreHeap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote...CVE-2014-8138Fix availableEPSS 18.5%7.5 High
- jasper project jasper, redhat enterprise linux +1 moreDouble free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier...CVE-2014-8137Fix availableEPSS 14.5%6.8 Medium
- redhat libvirt, canonical ubuntu linux, mageia +5 more +7 moreThe (1) qemuDomainMigratePerform and (2) qemuDomainMigrateFinish2 functions in qemu/qemu_driver.c...CVE-2014-8136Fix available2.1 Low
- pcre, fedoraproject fedora, mariadb +8 more +10 moreHeap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of...CVE-2014-8964Fix available5.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +9 more +11 moreThe krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap...CVE-2014-5353Fix available3.5 Low
- debian hivex, opensuse, redhat enterprise linux desktop +3 more +5 morelib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain...CVE-2014-9273Fix available4.6 Medium
- gnome gnome-shell, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreGNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the...CVE-2014-7300Fix available7.2 High
- jqueryui jquery ui, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 morejquery-ui Tooltip widget vulnerable to XSSCVE-2012-6662Fix available4.3 Medium
- redhat enterprise linux desktop, enterprise linux server, enterprise linux server aus +4 more +6 moreThe mod_auth_mellon module before 0.8.1 allows remote attackers to cause a denial of service ...CVE-2014-8567Fix available9.4 High
- adobe flash player, hp insight orchestration, system management homepage +12 more +14 moreHeap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before...CVE-2015-3113In KEVPublic exploitFix availableEPSS 99.8%9.8 Critical
- adobe flash player, novell suse linux enterprise desktop, suse linux enterprise workstation extension +6 more +8 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3044Fix available5.0 Medium
- adobe flash player, novell suse linux enterprise desktop, suse linux enterprise workstation extension +8 more +10 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3043In KEVPublic exploitFix availableEPSS 73.9%9.8 Critical
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3042Public exploitFix availableEPSS 36.8%10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3041Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3040Fix available5.0 Medium
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-3039Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-3038Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0360Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreUse-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before...CVE-2015-0358Fix availableEPSS 10.4%10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0355Fix available10.0 High
- adobe flash player, opensuse, redhat enterprise linux desktop supplementary +5 more +7 moreAdobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X...CVE-2015-0354Fix available10.0 High
- Show moreLoading…