Skip to contentRedhat Linux vulnerabilities
- [unknown] samba, redhat enterprise linux desktop, enterprise linux server +5 more +7 moreIt was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets...CVE-2016-2125Fix available6.4 Medium
- jasper project jasper, debian linux, redhat enterprise linux desktop +3 more +5 moreJasPer before version 2.0.12 is vulnerable to a use-after-free in the way it decodes certain JPEG...CVE-2016-9591Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA potentially exploitable crash in "EnumerateSubDocuments" while adding or removing sub-documents...CVE-2016-9905Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreAn attacker could use a JavaScript Map/Set timing attack to determine whether an atom is used by...CVE-2016-9904Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux desktop +4 more +6 moreThe Pocket toolbar button, once activated, listens for events fired from it's own pages but does...CVE-2016-9902Fix available7.5 High
- mozilla firefox, firefox esr, redhat enterprise linux aus +4 more +6 moreHTML tags received from the Pocket server will be processed without sanitization and any...CVE-2016-9901Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreExternal resources that should be blocked when loaded by SVG images can bypass security...CVE-2016-9900Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free while manipulating DOM events and removing audio elements due to errors in the...CVE-2016-9899Public exploitFix availableEPSS 19.4%9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreUse-after-free resulting in potentially exploitable crash when manipulating DOM subtrees in the...CVE-2016-9898Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory corruption resulting in a potentially exploitable crash during WebGL functions using a...CVE-2016-9897Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreEvent handlers on "marquee" elements were executed despite a strict Content Security Policy (CSP)...CVE-2016-9895Fix available6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Thunderbird 45.5. Some of these bugs showed evidence of...CVE-2016-9893Fix available9.8 Critical
- ceph, redhat ceph storage, ceph storage mon +4 more +6 moreA flaw was found in the way Ceph Object Gateway would process cross-origin HTTP requests if the...CVE-2016-9579Fix available6.5 Medium
- jasper project jasper, debian linux, redhat enterprise linux desktop +5 more +7 moreStack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1...CVE-2016-9560Fix available7.8 High
- ntp, canonical ubuntu linux, hpe hpux-ntp +6 more +8 moreNTP before 4.2.8p9 rate limits responses received from the configured sources when rate limiting...CVE-2016-7426Fix availableEPSS 12.4%7.5 High
- gstreamer, debian linux, fedoraproject fedora +6 more +8 moreThe windows_icon_typefind function in gst-plugins-base in GStreamer before 1.10.2, when G_SLICE...CVE-2016-9811Fix available4.7 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA missing check for whether a property of a JS object is private in V8 in Google Chrome prior to...CVE-2016-9651Public exploitFix availableEPSS 11.2%8.8 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this...CVE-2016-9079In KEVPublic exploitFix availableEPSS 87.4%7.5 High
- jasper project jasper, debian linux, redhat enterprise linux desktop +4 more +6 moreA heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being...CVE-2016-8654Fix available7.8 High
- dovecot, fedora dovecot22, opensuse leap +2 more +4 moreA postinstall script in the dovecot rpm allows local users to read the contents of newly created...CVE-2016-4983Fix available3.3 Low
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9636Fix available9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9635Fix available9.8 Critical
- gstreamer, debian linux, redhat enterprise linux desktop +3 more +5 moreHeap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the...CVE-2016-9634Fix available9.8 Critical
- clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 morePacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a...CVE-2016-7797Fix available7.5 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 moreSerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux...CVE-2016-7050Fix available9.8 Critical
- gstreamer, fedoraproject fedora, redhat enterprise linux desktop +5 more +7 moreThe vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote...CVE-2016-9446Fix available7.5 High
- mozilla nss, network security services, redhat enterprise linux desktop +5 more +7 moreIt was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to...CVE-2016-8635Fix available5.3 Medium
- mozilla network security services, avaya aura application enablement services, aura application server 5300 +25 more +27 moreNull pointer dereference vulnerability exists in K11_SignWithSymKey /...CVE-2016-5285Fix available7.5 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7865Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7864Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7863Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7862Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7861Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7860Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7859Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7858Fix available8.8 High
- adobe flash player, flash player for linux, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable...CVE-2016-7857Fix available8.8 High
- google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 moreV8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840...CVE-2016-5198In KEVFix availableEPSS 34.2%8.8 High
- clusterlabs pacemaker, redhat enterprise linux server, enterprise linux server eus +2 moreAn authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its...CVE-2016-7035Fix available8.8 High
- isc bind, debian linux, netapp data ontap edge +8 more +10 morenamed in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1...CVE-2016-8864Fix availableEPSS 38.7%7.5 High
- ceph, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA flaw was found in Red Hat Ceph before 0.94.9-8. The way Ceph Object Gateway handles POST object...CVE-2016-8626Fix available6.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and...CVE-2016-7855In KEVPublic exploitFix availableEPSS 25.2%8.8 High
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-5629Fix available4.9 Medium
- oracle mysql, mariadb, redhat enterprise linux eus +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and...CVE-2016-5626Fix available6.5 Medium
- oracle mysql, mariadb, redhat enterprise linux desktop +5 more +7 moreUnspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to...CVE-2016-5624Fix available6.5 Medium
- Show moreLoading…