LI
Product
Linux
On CISA KEVExploited in the wild
230
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 73Medium 62Low 4
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5287 In wildKEV | 7.8 | Dec 7 | Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Affected: 7 |
| CVE-2014-3153 In wildKEV | 7.8 | Jun 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 5; 6 |
| CVE-2016-5264 | 8.8 | Aug 5 | Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to… Affected: 5.0; 6; 7 |
| CVE-2016-5263 | 8.8 | Aug 5 | The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to… Affected: 5.0; 6; 7 |
| CVE-2016-5259 | 8.8 | Aug 5 | Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute… Affected: 5.0; 6; 7 |
| CVE-2016-5258 | 8.8 | Aug 5 | Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by… Affected: 5.0; 6; 7 |
| CVE-2016-5252 | 8.8 | Aug 5 | Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary… Affected: 5.0; 6; 7 |
| CVE-2016-3710 | 8.8 | May 11 | The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by… Affected: 5; 6; 7 |
| CVE-2016-4051 | 8.8 | Apr 25 | Buffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow remote attackers to cause a denial of service or execute arbitrary code by… Affected: 6; 7 |
| CVE-2016-2802 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote… Affected: 5.0; 6; 7 |
| CVE-2016-2801 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows… Affected: 5.0; 6; 7 |
| CVE-2016-2800 | 8.8 | Mar 13 | The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Affected: 5.0; 6; 7 |
| CVE-2016-2799 | 8.8 | Mar 13 | Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows… Affected: 5.0; 6; 7 |
| CVE-2016-2798 | 8.8 | Mar 13 | The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Affected: 5.0; 6; 7 |
| CVE-2016-2797 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers… Affected: 5.0; 6; 7 |
| CVE-2016-2796 | 8.8 | Mar 13 | Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7,… Affected: 5.0; 6; 7 |
| CVE-2016-2795 | 8.8 | Mar 13 | The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for… Affected: 5.0; 6; 7 |
| CVE-2016-2794 | 8.8 | Mar 13 | The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote… Affected: 5.0; 6; 7 |
| CVE-2016-2793 | 8.8 | Mar 13 | CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer… Affected: 5.0; 6; 7 |
| CVE-2016-2792 | 8.8 | Mar 13 | The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to… Affected: 5.0; 6; 7 |
| CVE-2016-2791 | 8.8 | Mar 13 | The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a… Affected: 5.0; 6; 7 |
| CVE-2016-2790 | 8.8 | Mar 13 | The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for… Affected: 5.0; 6; 7 |
| CVE-2016-1977 | 8.8 | Mar 13 | The Machine::Code::decoder::analysis::set_ref function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers… Affected: 5.0; 6; 7 |
| CVE-2016-1974 | 8.8 | Mar 13 | The nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not verify that memory allocation succeeds, which allows remote… Affected: 5.0; 6; 7 |
| CVE-2016-1973 | 8.8 | Mar 13 | Race condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox before 45.0 might allow remote attackers to execute arbitrary code or cause a… Affected: 5.0; 6; 7 |
| CVE-2016-1966 | 8.8 | Mar 13 | The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute… Affected: 5.0; 6; 7 |
| CVE-2016-1964 | 8.8 | Mar 13 | Use-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute arbitrary code or… Affected: 5.0; 6; 7 |
| CVE-2016-1961 | 8.8 | Mar 13 | Use-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote… Affected: 5.0; 6; 7 |
| CVE-2016-1960 | 8.8 | Mar 13 | Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string parser in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to execute… Affected: 5.0; 6; 7 |
| CVE-2016-1954 | 8.8 | Mar 13 | The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 does not prevent use of a non-HTTP… Affected: 5.0; 6; 7 |
| CVE-2016-1952 | 8.8 | Mar 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow remote attackers to cause a denial of service… Affected: 5.0; 6; 7 |
| CVE-2016-1950 | 8.8 | Mar 13 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR… Affected: 5.0; 6; 7; 5.0; 6; 7 |
| CVE-2016-1935 | 8.8 | Jan 31 | Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL… Affected: 5.0; 6; 7 |
| CVE-2016-6250 | 8.6 | Sep 21 | Integer overflow in the ISO9660 writer in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors… Affected: 7 |
| CVE-2016-4554 | 8.6 | May 10 | mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host… Affected: 6; 7 |
| CVE-2016-4553 | 8.6 | May 10 | client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct… Affected: 7 |
| CVE-2015-1779 | 8.6 | Jan 12 | The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers… Affected: 7 |
| CVE-2016-3477 | 8.1 | Jul 21 | Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before… Affected: 7 |
| CVE-2016-5387 | 8.1 | Jul 19 | The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY… Affected: 5; 6; 7 |
| CVE-2016-5386 | 8.1 | Jul 19 | The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of… Affected: 7 |
| CVE-2016-5385 | 8.1 | Jul 19 | PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in… Affected: 6; 7 |
| CVE-2016-5388 | 8.1 | Jul 19 | Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the… Affected: 6; 7 |
| CVE-2016-4054 | 8.1 | Apr 25 | Buffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to execute arbitrary code via crafted Edge Side Includes (ESI) responses Affected: 6; 7 |
| CVE-2016-1714 | 8.1 | Apr 7 | The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS… Affected: 6; 7 |
| CVE-2016-0778 | 8.1 | Jan 14 | The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are… Affected: 7 |
| CVE-2021-3551 | 7.8 | Feb 16 | A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file Affected: 8 |
| CVE-2021-2464 | 7.8 | Sep 24 | Vulnerability in Oracle Linux (component: OSwatcher) Affected: 7; 8 |
| CVE-2016-4997 | 7.8 | Jul 3 | The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges… Affected: 7 |
| CVE-2016-5126 | 7.8 | Jun 1 | Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly… Affected: 7 |
| CVE-2016-4951 | 7.8 | May 23 | The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service (NULL… Affected: 6 |