Skip to contentRedhat Linux Workstation vulnerabilities
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2640Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2637Fix available7.4 High
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS)....CVE-2018-2634Fix available6.8 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2633Fix available8.3 High
- oracle jrockit, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2629Fix available5.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2622Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2618Fix available5.9 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2603Fix available5.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n)....CVE-2018-2602Fix available4.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2599Fix available4.8 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2588Fix available4.3 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...CVE-2018-2582Fix available6.5 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2579Fix available3.7 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Partition)....CVE-2018-2562Fix available7.1 High
- red hat, inc. systemd, canonical ubuntu linux, debian linux +8 more +10 moreIn systemd prior to 234 a race condition exists between .mount and .automount units such that...CVE-2018-1049Public exploitFix available5.9 Medium
- isc bind, bind 9, debian linux +8 more +10 moreImproper fetch cleanup sequencing in the resolver can cause named to crashCVE-2017-3145Fix availableEPSS 27.7%7.5 High
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +3 more +5 moreIn the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization,...CVE-2018-5344Fix available7.8 High
- gnome gcab, canonical ubuntu linux, debian linux +7 more +9 moreA stack-based buffer overflow within GNOME gcab through 0.7.4 can be exploited by malicious...CVE-2018-5345Fix available7.8 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreIn glibc 2.26 and earlier there is confusion in the usage of getcwd() by realpath() which can be...CVE-2018-1000001Public exploitFix availableEPSS 13.4%7.8 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn Out-of-bounds Read issue was discovered in Adobe Flash Player before 28.0.0.137. This...CVE-2018-4871Fix available7.5 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +17 more +19 moreA use-after-free vulnerability was found in network namespaces code affecting the Linux kernel...CVE-2017-15129Fix available4.7 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before...CVE-2017-18344Public exploitFix available5.5 Medium
- debian linux, linux kernel, arista eos +26 more +28 moreThe tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11,...CVE-2017-18017Fix availableEPSS 52.8%9.8 Critical
- mozilla thunderbird, debian linux, redhat enterprise linux +5 more +7 moreRSS fields can inject new lines into the created email structure, modifying the message body....CVE-2017-7848Fix available5.3 Medium
- mozilla thunderbird, debian linux, redhat enterprise linux aus +4 more +6 moreCrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....CVE-2017-7847Fix available4.3 Medium
- mozilla thunderbird, debian linux, redhat enterprise linux desktop +4 more +6 moreIt is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website,...CVE-2017-7846Fix available8.8 High
- mozilla thunderbird, canonical ubuntu linux, debian linux +5 more +7 moreIt is possible to spoof the sender's email address and display an arbitrary sender address to the...CVE-2017-7829Fix available5.3 Medium
- isc dhcp, canonical ubuntu linux, debian linux +6 more +8 moreFailure to properly clean up closed OMAPI connections can exhaust available socketsCVE-2017-3144Fix availableEPSS 72.7%5.3 Medium
- gnu glibc, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreelf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and...CVE-2017-16997Public exploitFix available7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239...CVE-2017-15429Fix available6.1 Medium
- ruby-lang ruby, debian linux, redhat enterprise linux desktop +5 more +7 moreRuby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile,...CVE-2017-17405Public exploitFix availableEPSS 73.8%8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreA regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the...CVE-2017-11305Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreOut-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15407Fix available8.8 High
- mozilla firefox, firefox esr, debian linux +5 more +7 moreWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...CVE-2017-7843Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic...CVE-2017-1000407Fix available7.4 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15427Fix available6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15426Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15425Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15424Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a...CVE-2017-15423Fix available5.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63...CVE-2017-15420Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84...CVE-2017-15419Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote...CVE-2017-15418Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0...CVE-2017-15417Fix available5.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...CVE-2017-15416Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...CVE-2017-15415Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote...CVE-2017-15413Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...CVE-2017-15411Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...CVE-2017-15410Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...CVE-2017-15409Fix available8.8 High
- Show moreLoading…