Skip to contentRedhat Linux Workstation vulnerabilities
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of...CVE-2015-5260Fix available7.8 High
- spice project spice, redhat enterprise linux, enterprise linux desktop +3 more +5 moreRace condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote...CVE-2015-3247Fix available6.9 Medium
- ntp, canonical ubuntu linux, debian linux +13 more +15 moreThe ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions...CVE-2015-5219Fix available7.5 High
- ntp, canonical ubuntu linux, debian linux +5 more +7 morentp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of...CVE-2015-5195Public exploitFix available7.5 High
- ntp, canonical ubuntu linux, debian linux +10 more +12 moreThe log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote...CVE-2015-5194Fix available7.5 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- ibm java sdk, redhat enterprise linux desktop, enterprise linux eus +5 more +7 moreIBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before...CVE-2015-19315.5 Medium
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux hpc node eus +4 more +6 moreThe Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local...CVE-2015-31495.5 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux hpc node +3 more +5 morearch/x86/entry/entry_64.S in the Linux kernel before 4.1.6 on the x86_64 platform mishandles IRET...CVE-2015-5157Fix available7.2 High
- google chrome, debian linux, opensuse +4 more +6 moreThe Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS...CVE-2015-1288Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreCross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function...CVE-2015-1286Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used...CVE-2015-1282Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreInteger overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium,...CVE-2015-1279Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 morecontent/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not...CVE-2015-1278Fix available4.3 Medium
- google chrome, debian linux, opensuse +3 more +5 moreGoogle Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous...CVE-2015-1274Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreHeap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome...CVE-2015-1273Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 morePDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of...CVE-2015-1271Fix available6.8 Medium
- google chrome, debian linux, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to...CVE-2015-1289Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreBlink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits...CVE-2015-1287Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreThe XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in...CVE-2015-1285Fix available5.0 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +2 more +4 moreThe LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google...CVE-2015-1284Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 morecore/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not...CVE-2015-1281Fix available4.3 Medium
- google chrome, debian linux, opensuse +4 more +6 moreSkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote...CVE-2015-1280Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0...CVE-2015-1277Fix available7.5 High
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the...CVE-2015-1276Fix available9.8 Critical
- google chrome, debian linux, opensuse +4 more +6 moreUse-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403...CVE-2015-1272Fix available7.5 High
- google chrome, debian linux, opensuse +5 more +7 moreThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...CVE-2015-1270Fix available6.8 Medium
- mariadb, oracle mysql, debian linux +9 more +11 moreOracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and...CVE-2015-3152Public exploitFix available5.9 Medium
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier and 5.6.23 and earlier allows...CVE-2015-4757Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4752Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2648Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2643Fix available4.0 Medium
- oracle java se, canonical ubuntu linux, debian linux +19 more +21 moreUnspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and...CVE-2015-2590In KEVFix availableEPSS 25.5%9.8 Critical
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2582Fix available4.0 Medium
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation...CVE-2015-5123In KEVFix availableEPSS 18.8%9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 moreUse-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)...CVE-2015-5122In KEVPublic exploitFix availableEPSS 87.0%9.8 Critical
- adobe flash player, opensuse evergreen, opensuse +8 more +10 moreUse-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in...CVE-2015-5119In KEVPublic exploitFix availableEPSS 98.6%9.8 Critical
- haproxy, canonical ubuntu linux, debian linux +9 more +11 moreThe buffer_slow_realign function in HAProxy 1.5.x before 1.5.14 and 1.6-dev does not properly...CVE-2015-3281Fix available5.0 Medium
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5...CVE-2015-46057.5 High
- php, redhat enterprise linux, enterprise linux desktop +5 more +7 moreThe mget function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4...CVE-2015-46047.5 High
- debian linux, linux kernel, qemu +16 more +18 moreThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...CVE-2015-3214Public exploitFix available6.9 Medium
- php, apple mac os x, redhat enterprise linux desktop +5 more +7 moreThe SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5...CVE-2015-4147Fix availableEPSS 12.2%7.5 High
- php, apple mac os x, redhat enterprise linux +6 more +8 moreThe phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24,...CVE-2015-33077.5 High
- w1.fi hostapd, opensuse, redhat enterprise linux desktop +4 more +6 moreInteger underflow in the WMM Action frame parser in hostapd 0.5.5 through 2.4 and wpa_supplicant...CVE-2015-4142Fix available4.3 Medium
- php, apple mac os x, redhat enterprise linux +6 more +8 morePHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon...CVE-2015-4025Fix availableEPSS 17.0%7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreMultiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to...CVE-2015-1250Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreUse-after-free vulnerability in the MutationObserver::disconnect function in core/dom...CVE-2015-1243Fix available7.5 High
- apache openoffice, libreoffice, canonical ubuntu linux +5 more +7 moreThe HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4...CVE-2015-1774Fix available6.8 Medium
- canonical ubuntu linux, debian linux, opensuse +7 more +9 moreHeap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a...CVE-2015-1863Fix available5.8 Medium
- Show moreLoading…