Skip to contentRedhat Linux Server vulnerabilities
- openbsd openssh, debian linux, netapp active iq unified manager +18 more +20 moreThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...CVE-2017-15906Fix available5.3 Medium
- apache portable runtime, debian linux, redhat enterprise linux desktop +8 more +10 moreWhen apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field...CVE-2017-12613Fix available7.1 High
- oracle corporation java, netapp active iq unified manager, cloud backup +24 more +26 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2017-10309Public exploit7.1 High
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10388Fix available7.5 High
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10357Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10356Fix available6.2 Medium
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10355Public exploitFix availableEPSS 16.2%5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS)...CVE-2017-10350Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)....CVE-2017-10349Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10348Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)....CVE-2017-10347Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2017-10346Fix available9.6 Critical
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10345Fix available3.1 Low
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10295Fix available4.0 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2017-10285Fix available9.6 Critical
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10281Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +26 more +28 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported...CVE-2017-10274Fix available6.8 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure,...CVE-2017-11292In KEVFix availableEPSS 11.2%8.8 High
- golang go, fedoraproject fedora, redhat enterprise linux server +3 more +5 moreThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...CVE-2015-57409.8 Critical
- golang go, fedoraproject fedora, redhat enterprise linux server +3 more +5 moreThe net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP...CVE-2015-57399.8 Critical
- oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-10378Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2017-10268Fix available4.1 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...CVE-2017-13088Fix available5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...CVE-2017-13087Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...CVE-2017-13086Fix available6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...CVE-2017-13082Fix available8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13081Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13080Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...CVE-2017-13079Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...CVE-2017-13078Fix available5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...CVE-2017-13077Fix available6.8 Medium
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems vulnerable to Deserialization of Untrusted DataCVE-2017-0903Fix availableEPSS 15.9%9.8 Critical
- golang go, debian linux, redhat developer tools +4 more +6 moreGo before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom...CVE-2017-15041Fix available9.8 Critical
- fedoraproject sssd, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize...CVE-2017-12173Fix available4.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreInteger underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, -...CVE-2017-14496Public exploitFix availableEPSS 68.4%7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreMemory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is...CVE-2017-14495Public exploitFix availableEPSS 85.4%7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 morednsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive...CVE-2017-14494Public exploitFix availableEPSS 70.5%5.9 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 moreStack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14493Public exploitFix availableEPSS 85.2%9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14492Public exploitFix availableEPSS 94.5%9.8 Critical
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreIn dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size...CVE-2017-13704Fix availableEPSS 65.4%7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow occurs when drawing and validating elements with the ANGLE graphics library,...CVE-2017-7824Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...CVE-2017-7823Fix available5.4 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur in design mode when image objects are resized if objects...CVE-2017-7819Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...CVE-2017-7818Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...CVE-2017-7814Fix available7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...CVE-2017-7810Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...CVE-2017-7793Fix available9.8 Critical
- Show moreLoading…