Skip to contentRedhat Linux Workstation vulnerabilities
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...CVE-2017-15408Fix available8.8 High
- google chrome, icu-project international components for unicode, canonical ubuntu linux +7 more +9 moreInteger overflow in international date handling in International Components for Unicode (ICU) for...CVE-2017-15422Fix available6.5 Medium
- google chrome, xmlsoft libxml2, debian linux +3 more +5 moreNokogiri gem, via libxml, is affected by DoS vulnerabilitiesCVE-2017-15412Fix available8.8 High
- debian linux, linux kernel, redhat enterprise linux desktop +6 more +8 moreThe Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing...CVE-2017-1000410Fix available7.5 High
- red hat enterprise linux, red hat, inc. hat enterprise linux, redhat enterprise linux desktop +5 more +7 moreA non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an...CVE-2017-15121Fix available5.5 Medium
- liblouis, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of...CVE-2017-15101Fix available7.8 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreSamba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging...CVE-2017-15275Fix availableEPSS 21.4%7.5 High
- samba, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute...CVE-2017-14746Fix available9.8 Critical
- mit krb5, kerberos 5, redhat enterprise linux +3 more +5 moreAn authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1...CVE-2017-7562Fix available6.5 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-3114Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-3112Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-11225Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-11215Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability...CVE-2017-11213Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe Resource Timing API incorrectly revealed navigations in cross-origin iframes. This is a same...CVE-2017-7830Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when flushing and resizing layout because the ...CVE-2017-7828Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed...CVE-2017-7826Fix available9.8 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to...CVE-2017-15399Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89...CVE-2017-15398Fix available9.8 Critical
- google chrome, icu-project international components for unicode, debian linux +3 more +5 moreA stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C+...CVE-2017-15396Fix available6.5 Medium
- debian linux, torproject tor, redhat enterprise linux desktop +5 more +7 moreTor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended...CVE-2017-16541Public exploitFix available6.5 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +18 more +20 moreThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...CVE-2017-15906Fix available5.3 Medium
- apache portable runtime, debian linux, redhat enterprise linux desktop +8 more +10 moreWhen apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field...CVE-2017-12613Fix available7.1 High
- oracle corporation java, netapp active iq unified manager, cloud backup +24 more +26 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported...CVE-2017-10309Public exploit7.1 High
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10388Fix available7.5 High
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10357Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10356Fix available6.2 Medium
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10355Public exploitFix availableEPSS 16.2%5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS)...CVE-2017-10350Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)....CVE-2017-10349Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-10348Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)....CVE-2017-10347Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2017-10346Fix available9.6 Critical
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10345Fix available3.1 Low
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10295Fix available4.0 Medium
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-10281Fix available5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +26 more +28 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported...CVE-2017-10274Fix available6.8 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure,...CVE-2017-11292In KEVFix availableEPSS 11.2%8.8 High
- oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-10378Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2017-10268Fix available4.1 Medium
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems vulnerable to Deserialization of Untrusted DataCVE-2017-0903Fix availableEPSS 15.9%9.8 Critical
- fedoraproject sssd, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize...CVE-2017-12173Fix available4.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreInteger underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, -...CVE-2017-14496Public exploitFix availableEPSS 68.4%7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreMemory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is...CVE-2017-14495Public exploitFix availableEPSS 85.4%7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 morednsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive...CVE-2017-14494Public exploitFix availableEPSS 70.5%5.9 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 moreStack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14493Public exploitFix availableEPSS 85.2%9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14492Public exploitFix availableEPSS 94.5%9.8 Critical
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...CVE-2017-14491Public exploitFix availableEPSS 86.5%9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreIn dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size...CVE-2017-13704Fix availableEPSS 65.4%7.5 High
- Show moreLoading…