EL
Product
Enterprise Linux Eus
On CISA KEVExploited in the wildRansomware-linked
789
CVEs
42
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 73High 196Medium 231Low 0
Watch
Add Enterprise Linux Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-2668 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2665 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2640 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2622 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-16541 | 6.5 | Nov 4 | Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web… Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10384 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10379 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10378 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10243 | 6.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-9287 | 6.5 | May 29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3453 | 6.5 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2015-8896 | 6.5 | Mar 15 | Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file Affected: 7.2; 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3258 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3244 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3238 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-5626 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-5624 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-5612 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-3492 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-4020 | 6.5 | May 25 | The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information… Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2015-8631 | 6.5 | Feb 13 | Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a… Affected: 6.7; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2014-1523 | 6.5 | Apr 30 | Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote… Affected: 6.5 |
| CVE-2012-3489 | 6.5 | Oct 3 | The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote… Affected: 6.3 |
| CVE-2012-0037 | 6.5 | Jun 17 | Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted… Affected: 6.2 |
| CVE-2012-1798 | 6.5 | Jun 5 | The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted… Affected: 6.2 |
| CVE-2012-0260 | 6.5 | Jun 5 | The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a… Affected: 6.2 |
| CVE-2008-3281 | 6.5 | Aug 27 | libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service… Affected: 4.7; 5.2 |
| CVE-2019-2503 | 6.4 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2017-3291 | 6.3 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2014-0147 | 6.2 | Feb 11 | Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or… Affected: 6.5 |
| CVE-2017-10356 | 6.2 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2014-1530 | 6.1 | Apr 30 | The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the… Affected: 6.5 |
| CVE-2020-14311 | 6.0 | Jul 31 | There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems Affected: 8.1; 8.2 |
| CVE-2020-14310 | 6.0 | Jul 31 | There is an issue on grub2 before version 2.06 at function read_section_as_string() Affected: 8.1; 8.2 |
| CVE-2024-3049 | 5.9 | Jun 6 | Booth: specially crafted hash can lead to invalid hmac being accepted by booth server Affected: 8.4; 8.8; 9.2 |
| CVE-2023-5992 | 5.9 | Jan 31 | A vulnerability was found in OpenSC where PKCS#1 encryption padding removal is not implemented as side-channel resistant Affected: 9.4 |
| CVE-2023-4806 | 5.9 | Sep 18 | Glibc: potential use-after-free in getaddrinfo() Affected: 8.8; 9.2 |
| CVE-2023-4813 | 5.9 | Sep 12 | Glibc: potential use-after-free in gaih_inet() Affected: 8.8; 9.2 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: 8.2; 8.4 |
| CVE-2019-2684 | 5.9 | Apr 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-18506 | 5.9 | Feb 5 | When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-6111 | 5.9 | Jan 31 | An issue was discovered in OpenSSH 7.9 Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-2761 | 5.9 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 7.5; 7.6; 7.7 |
| CVE-2016-0762 | 5.9 | Aug 10 | The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied… Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10135 | 5.9 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-2775 | 5.9 | Jul 19 | ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of… Affected: 7.2; 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2015-3152 | 5.9 | May 16 | Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows… Affected: 7.1; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2012-3552 | 5.9 | Oct 3 | Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending… Affected: 6.2 |
| CVE-2021-3672 | 5.6 | Nov 23 | A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might… Affected: 7.7; 8.1; 8.2; 8.4 |
| CVE-2019-3887 | 5.6 | Apr 9 | A flaw was found in the way KVM hypervisor handled x2APIC Machine Specific Rregister (MSR) access with nested(=1) virtualization enabled Affected: 8.1; 8.2; 8.4 |
The 500 most important CVEs for this product (exploited first, then by severity)