EM
Product
Enterprise Mrg
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 15Medium 15Low 0
Watch
Add Enterprise Mrg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-6461 | 6.5 | Nov 5 | Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits Affected: 2.0 |
| CVE-2013-6460 | 6.5 | Nov 5 | Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents Affected: 2.0 |
| CVE-2019-3459 | 6.5 | Apr 11 | A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1 Affected: 2.0 |
| CVE-2014-3706 | 5.9 | Oct 18 | ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509 certificates Affected: 3.0 |
| CVE-2020-27825 | 5.7 | Dec 11 | A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1) Affected: 2.0 |
| CVE-2014-8181 | 5.5 | Nov 6 | The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace Affected: 2.0 |
| CVE-2014-8171 | 5.5 | Feb 9 | The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained… Affected: 2.0 |
| CVE-2017-15128 | 5.5 | Jan 14 | A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12 Affected: 2.0 |
| CVE-2017-15127 | 5.5 | Jan 14 | A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13 Affected: 2.0 |
| CVE-2015-7837 | 5.5 | Sep 19 | The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended… Affected: 2.0 |
| CVE-2016-4470 | 5.5 | Jun 27 | The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to… Affected: 2.0 |
| CVE-2015-1350 | 5.5 | May 2 | The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which… Affected: 2.0 |
| CVE-2012-1090 | 5.5 | May 17 | The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as… Affected: 2.0 |
| CVE-2020-12826 | 5.3 | May 12 | A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2 Affected: 2.0 |
| CVE-2015-7553 | 4.7 | Sep 14 | Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial… Affected: 2.0 |
Showing 15