LI
Product
Linux
On CISA KEVExploited in the wild
230
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 73Medium 62Low 4
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3500 | 5.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related… Affected: 5.0; 6; 7 |
| CVE-2015-8629 | 5.3 | Feb 13 | The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters… Affected: 6; 7 |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: 5; 6; 7 |
| CVE-2016-0641 | 5.1 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 7 |
| CVE-2016-5440 | 4.9 | Jul 21 | Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before… Affected: 7 |
| CVE-2025-4598 | 4.7 | May 30 | Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump Affected: 8; 9 |
| CVE-2026-35233 | 4.4 | May 1 | An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link field Affected: 8; 9; 10 |
| CVE-2016-3550 | 4.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot Affected: 5.0; 6; 7 |
| CVE-2016-3458 | 4.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA Affected: 5.0; 6; 7 |
| CVE-2016-1965 | 4.3 | Mar 13 | Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that returns to the original page, which allows remote attackers to spoof the address… Affected: 5.0; 6; 7 |
| CVE-2016-1958 | 4.3 | Mar 13 | browser/base/content/browser.js in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to spoof the address bar via a javascript: URL Affected: 5.0; 6; 7 |
| CVE-2016-1957 | 4.3 | Mar 13 | Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service (memory consumption) via an… Affected: 5.0; 6; 7 |