LE
Product
Linux Enterprise
On CISA KEVExploited in the wild
97
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 61Medium 27Low 0
Watch
Add Linux Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-41819 | 7.5 | Jan 1 | CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names Affected: 11.0; 12.0; 15.0 |
| CVE-2021-41817 | 7.5 | Jan 1 | Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string Affected: 12.0; 15.0 |
| CVE-2016-1700 | 7.5 | Jun 5 | extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows… Affected: 12.0 |
| CVE-2016-1691 | 7.5 | Jun 5 | Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or… Affected: 12.0 |
| CVE-2016-1690 | 7.5 | Jun 5 | The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows… Affected: 12.0 |
| CVE-2016-1683 | 7.5 | Jun 5 | numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service… Affected: 12.0 |
| CVE-2016-1656 | 7.5 | Apr 18 | The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors Affected: 12.0 |
| CVE-2010-0013 | 7.5 | Jan 9 | Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a Affected: 11.0 |
| CVE-2009-0949 | 7.5 | Jun 9 | The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of… Affected: 9.0; 10.0 |
| CVE-2016-7966 | 7.3 | Dec 23 | Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer Affected: 12.0 |
| CVE-2021-4166 | 7.1 | Dec 25 | Out-of-bounds Read in vim/vim Affected: 12.0; 15.0 |