Skip to contentRedhat Linux Server vulnerabilities
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux,...CVE-2017-5121Fix available8.8 High
- samba, debian linux, redhat enterprise linux desktop +3 more +5 moreAn information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4...CVE-2017-12163Fix available4.1 Medium
- samba, debian linux, hp cifs server +5 more +7 moreA flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used...CVE-2017-12151Fix available7.4 High
- samba, debian linux, redhat enterprise linux desktop +3 more +5 moreIt was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not...CVE-2017-12150Fix availableEPSS 13.1%7.4 High
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 moreWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the serverCVE-2017-12615In KEVPublic exploitFix availableEPSS 99.7%8.1 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0...CVE-2017-5120Fix available6.5 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBlink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for...CVE-2017-5118Fix available4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreType confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0...CVE-2017-5116Fix availableEPSS 12.7%8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux,...CVE-2017-5114Fix available8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreMath overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61...CVE-2017-5113Fix available8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac...CVE-2017-5111Fix available8.8 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser....CVE-2017-11282Public exploitFix availableEPSS 34.1%9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player has an exploitable memory corruption vulnerability in the text handling...CVE-2017-11281Public exploitFix availableEPSS 33.1%9.8 Critical
- debian linux, linux kernel, nvidia jetson tk1 +7 more +9 moreThe native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6...CVE-2017-1000251Public exploitFix availableEPSS 16.2%8.0 High
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe IEEE 802.11 parser in tcpdump before 4.9.2 has a buffer over-read in print-802_11.c...CVE-2017-12987Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe Zephyr parser in tcpdump before 4.9.2 has a buffer over-read in print-zephyr.c, several...CVE-2017-12902Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe DECnet parser in tcpdump before 4.9.2 has a buffer over-read in print-decnet.c:decnet_print().CVE-2017-12899Fix available9.8 Critical
- tcpdump, debian linux, redhat enterprise linux desktop +2 more +4 moreThe ISAKMP parser in tcpdump before 4.9.2 has a buffer over-read in print-isakmp.c...CVE-2017-12896Fix available9.8 Critical
- ruby-lang ruby, canonical ubuntu linux, debian linux +6 more +8 moreRuby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory...CVE-2017-14064Fix available9.8 Critical
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems has Origin Validation Error vulnerabilityCVE-2017-0902Fix available8.1 High
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems may allow a maliciously crafted gem to overwrite filesCVE-2017-0901Public exploitFix availableEPSS 29.4%7.5 High
- rubygems, debian linux, redhat enterprise linux desktop +5 more +7 moreRubyGems Improper Input Validation vulnerabilityCVE-2017-0900Fix available7.5 High
- hackerone rubygems, debian linux, redhat enterprise linux desktop +5 more +7 moreRubyGems Code Injection vulnerabilityCVE-2017-0899Fix availableEPSS 11.1%9.8 Critical
- mercurial, debian linux, redhat enterprise linux desktop +5 more +7 moreMercurial is vulnerable to shell injection attackCVE-2017-1000116Fix available9.8 Critical
- mercurial, debian linux, redhat enterprise linux desktop +5 more +7 moreMercurial missing symlink checkCVE-2017-1000115Fix available7.5 High
- debian linux, linux kernel, redhat enterprise linux +3 more +5 moreRace condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain...CVE-2017-10661Public exploitFix availableEPSS 13.5%7.0 High
- oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2017-10384Fix available6.5 Medium
- oracle mysql, debian linux, mariadb +14 more +16 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....CVE-2017-10379Fix available6.5 Medium
- debian linux, linux kernel, redhat enterprise linux +6 more +8 moreLinux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously...CVE-2017-1000111Fix available7.8 High
- mozilla firefox, thunderbird, debian linux +6 more +8 moreA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...CVE-2017-7809Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...CVE-2017-7807Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...CVE-2017-7803Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...CVE-2017-7802Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...CVE-2017-7801Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...CVE-2017-7800Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +6 more +8 moreThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...CVE-2017-7798Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow will occur when viewing a certificate in the certificate manager if the...CVE-2017-7792Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...CVE-2017-7791Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...CVE-2017-7787Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...CVE-2017-7786Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...CVE-2017-7785Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when reading an image observer during frame...CVE-2017-7784Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMemory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of...CVE-2017-7779Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line,...CVE-2017-7753Fix available9.1 Critical
- gnome libsoup, debian linux, redhat enterprise linux desktop +5 more +7 moreAn exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A...CVE-2017-2885Fix availableEPSS 23.1%9.8 Critical
- oracle corporation java, netapp active iq unified manager, cloud backup +21 more +23 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2017-101054.3 Medium
- apple iphone os, mac os x, chromium +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...CVE-2017-7000Fix available8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation of the web payments API on blob: and data: schemes in Web Payments...CVE-2017-5110Fix available6.5 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation of unload handler handling in permission prompts in Google Chrome...CVE-2017-5109Fix available4.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreType confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and...CVE-2017-5108Fix available8.8 High
- Show moreLoading…