Skip to contentRedhat Linux vulnerabilities
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-26064.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-25964.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-25934.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-25894.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition)....CVE-2019-25874.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-25854.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-25844.9 Medium
- oracle mysql, oracle corporation mysql server, fedoraproject fedora +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-25804.9 Medium
- apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 moreWithdrawn Advisory: Improper Certificate Validation in Apache Qpid ProtonCVE-2019-0223Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2698Public exploitFix availableEPSS 12.0%8.1 High
- oracle corporation java, canonical ubuntu linux, hp xp7 command view +8 more +10 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2697Public exploitFix availableEPSS 11.5%8.1 High
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2019-2683Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-2628Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2627Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2614Fix available4.4 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2602Fix available7.5 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported...CVE-2019-2592Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2019-2581Fix available4.9 Medium
- mercurial, debian linux, redhat enterprise linux +2 moreMercurial Path Traversal/Link Following vulnerabilityCVE-2019-3902Fix available5.1 Medium
- gnome evince, canonical ubuntu linux, debian linux +6 more +8 moreThe tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document...CVE-2019-11459Fix available5.5 Medium
- eclipse openj9, the eclipse foundation eclipse openj9, redhat enterprise linux +4 more +6 moreIn Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a...CVE-2019-102457.5 High
- red hat 389-ds-base, debian linux, fedoraproject 389 directory server +1 more +3 moreIn 389-ds-base up to version 1.4.1.2, requests are handled by workers threads. Each sockets will...CVE-2019-3883Fix available5.3 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification...CVE-2018-16878Fix available6.2 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in the way pacemaker's client-server authentication was implemented in versions...CVE-2018-16877Fix available8.8 High
- freeradius, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreFreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is...CVE-2019-11235Fix available9.8 Critical
- freeradius, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreFreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a ...CVE-2019-11234Fix available9.8 Critical
- broadcom brcmfmac wifi driver, brcmfmac driver, redhat enterprise linux +2 moreBroadcom brcmfmac driver is vulnerable to a frame validation bypassCVE-2019-9503Fix available7.9 High
- linux kernel, redhat enterprise linux +1 moreIt was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is...CVE-2019-3837Fix available6.1 Medium
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2019-8544Fix available8.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...CVE-2019-8536Fix available8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...CVE-2019-8535Fix available8.8 High
- apple icloud, icloud for windows, ios +10 more +12 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...CVE-2019-8506In KEVPublic exploitFix availableEPSS 16.2%8.8 High
- isc bind, redhat enterprise linux server aus, enterprise linux server eus +1 more +3 moreA denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker...CVE-2017-3139Fix available7.5 High
- microsoft nuget, .net core sdk, visual studio +6 more +8 moreA tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow...CVE-2019-0757Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreA flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access...CVE-2019-3887Fix available6.7 Medium
- samba, debian linux, fedoraproject fedora +3 more +5 moreA flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry...CVE-2019-3880Fix available4.2 Medium
- systemd, debian linux, fedoraproject fedora +1 more +3 moreIn systemd before v242-rc4, it was discovered that pam_systemd does not properly sanitize the...CVE-2019-3842Public exploitFix available4.5 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), fedoraproject fedora +6 more +8 moreBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...CVE-2019-0160Fix available8.7 High
- rubygems, debian linux, opensuse leap +1 more +3 moreCode injection in RubyGemsCVE-2019-8324Fix available8.8 High
- [unknown] sssd, redhat enterprise linux +1 moreA flaw was found in sssd Group Policy Objects implementation. When the GPO is not readable by...CVE-2018-16838Fix available5.4 Medium
- linux kernel, canonical ubuntu linux, debian linux +6 more +8 moreThe SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem....CVE-2019-3874Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreIncorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead...CVE-2019-9810Public exploitFix availableEPSS 27.2%8.8 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- canonical ubuntu linux, fedoraproject fedora, mod auth mellon project auth mellon +2 more +4 moreA vulnerability was found in mod_auth_mellon before v0.14.2. An open redirect in the logout URL...CVE-2019-3877Fix available5.8 Medium
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreIt was found that the forceput operator could be extracted from the DefineResource method in...CVE-2019-3838Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 moreIt was found that the superexec operator was available in the internal dictionary in ghostscript...CVE-2019-3835Fix available7.3 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack...CVE-2019-9903Fix available6.5 Medium
- Show moreLoading…