Skip to contentRedhat Linux vulnerabilities
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6397Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6396Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6394Fix available5.4 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6393Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an...CVE-2020-6392Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87...CVE-2020-6391Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreOut of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote...CVE-2020-6390Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a...CVE-2020-6385Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to...CVE-2020-6382Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInteger overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87...CVE-2020-6381Fix available8.8 High
- kde, kde konqueror, redhat enterprise linux +3 more +5 moreThe CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to...CVE-2012-4512Public exploitEPSS 11.7%8.8 High
- golang go, redhat enterprise linux, openstack +2 moreThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...CVE-2015-57419.8 Critical
- nodejs node, debian linux, nodejs node.js +5 more +7 moreIncluding trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of...CVE-2019-15606Fix availableEPSS 20.0%9.8 Critical
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...CVE-2019-15604Fix availableEPSS 20.0%7.5 High
- nodejs node, node.js, debian linux +11 more +13 moreHTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer...CVE-2019-15605Public exploitFix availableEPSS 57.1%9.8 Critical
- [unknown] systemd, debian linux, redhat ceph storage +7 more +9 moreA heap use-after-free vulnerability was found in systemd before version v245-rc1, where...CVE-2020-1712Public exploitFix available7.8 High
- abrt, fedoraproject fedora, redhat automatic bug reporting tool +3 more +5 moreABRT might allow attackers to obtain sensitive information from crash reports.CVE-2011-40887.5 High
- apple icloud, icloud for windows, ipados +9 more +11 moreA use after free issue was addressed with improved memory management. This issue is fixed in tvOS...CVE-2019-8846Fix available8.8 High
- apple icloud, icloud for windows, ipados +10 more +12 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8844Fix available8.8 High
- apple icloud, icloud for windows, ipados +9 more +11 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...CVE-2019-8835Fix available8.8 High
- red hat samba, canonical ubuntu linux, debian linux +7 more +9 moreAll samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an...CVE-2019-14907Fix available6.5 Medium
- redhat enterprise linux, red hat kpatch:, redhat enterprise linux eus +2 moreIt was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix...CVE-2019-19339Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2659Fix available3.7 Low
- oracle corporation java, debian linux, oracle jdk +2 more +4 moreVulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...CVE-2020-2655Public exploitFix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions...CVE-2020-2654Fix available3.7 Low
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle corporation java, canonical ubuntu linux, debian linux +21 more +23 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2601Fix available6.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)....CVE-2020-2593Fix available4.8 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)....CVE-2020-2590Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +22 more +24 moreVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component:...CVE-2020-2583Fix available3.7 Low
- microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 moreRemote code execution in ASP.NET CoreCVE-2020-0603Fix availableEPSS 22.6%8.8 High
- microsoft asp.net core, redhat enterprise linux, enterprise linux eus +2 moreDenial of service in ASP.NET CoreCVE-2020-0602Fix available7.5 High
- abrt, redhat automatic bug reporting tool, enterprise linux desktop +5 more +7 moredaemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports...CVE-2015-31476.5 Medium
- uclouvain openjpeg, debian linux, fedoraproject fedora +9 more +11 moreOpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in...CVE-2020-6851Fix available7.5 High
- google chrome, debian linux, fedoraproject fedora +4 more +6 moreUse after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to...CVE-2020-6377Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +9 more +11 moreMozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some...CVE-2019-17024Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17022Fix available6.1 Medium
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreDue to a missing case handling object types, a type confusion vulnerability could occur,...CVE-2019-17017Fix available8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +6 more +8 moreWhen pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer...CVE-2019-17016Fix available6.1 Medium
- red hat sdl, libsdl simple directmedia layer, redhat enterprise linux +2 moreA flaw was found with the RHSA-2019:3950 erratum, where it did not fix the CVE-2019-13616 SDL...CVE-2019-14906Fix available8.1 High
- zend framework, fedoraproject fedora, redhat enterprise linux +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Zend Framework 2.0.x before 2.0.1 allow...CVE-2012-4451Fix available6.1 Medium
- samba, redhat enterprise linux +1 moreMultiple race conditions in the (1) mount.cifs and (2) umount.cifs programs in Samba 3.6 allow...CVE-2011-3585Fix available4.7 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18391Fix available5.5 Medium
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreAn out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in...CVE-2019-18390Fix available7.1 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18389Fix available7.8 High
- red hat tower, redhat ansible tower, enterprise linux +2 moreA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where...CVE-2019-193408.2 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- Show moreLoading…