EL
Product
Enterprise Linux Eus
On CISA KEVExploited in the wildRansomware-linked
789
CVEs
42
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 73High 196Medium 231Low 0
Watch
Add Enterprise Linux Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-2795 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2740 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-9959 | 6.5 | Jul 22 | The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2695 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2694 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2693 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-3460 | 6.5 | Apr 11 | A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1 Affected: 8.1; 8.2; 8.4 |
| CVE-2019-3459 | 6.5 | Apr 11 | A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1 Affected: 8.1; 8.2; 8.4 |
| CVE-2019-0757 | 6.5 | Apr 9 | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet… Affected: 8.1; 8.2; 8.4 |
| CVE-2019-9903 | 6.5 | Mar 21 | PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2455 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2533 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2529 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2434 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-20662 | 6.5 | Jan 3 | In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-20650 | 6.5 | Jan 1 | A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-18897 | 6.5 | Nov 2 | An issue was discovered in Poppler 0.71.0 Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-2819 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2817 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2668 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2665 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2640 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2622 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-16541 | 6.5 | Nov 4 | Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web… Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10384 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10379 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10378 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.5; 7.6; 7.7 |
| CVE-2017-10243 | 6.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-9287 | 6.5 | May 29 | servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3453 | 6.5 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2015-8896 | 6.5 | Mar 15 | Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file Affected: 7.2; 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3258 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3244 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-3238 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-5626 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-5624 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-5612 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-3492 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2016-4020 | 6.5 | May 25 | The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information… Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2015-8631 | 6.5 | Feb 13 | Multiple memory leaks in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a… Affected: 6.7; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2014-1523 | 6.5 | Apr 30 | Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote… Affected: 6.5 |
| CVE-2012-3489 | 6.5 | Oct 3 | The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 allows remote… Affected: 6.3 |
| CVE-2012-0037 | 6.5 | Jun 17 | Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and other products, allows user-assisted… Affected: 6.2 |
| CVE-2012-1798 | 6.5 | Jun 5 | The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted… Affected: 6.2 |
| CVE-2012-0260 | 6.5 | Jun 5 | The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a JPEG image with a… Affected: 6.2 |
| CVE-2008-3281 | 6.5 | Aug 27 | libxml2 2.6.32 and earlier does not properly detect recursion during entity expansion in an attribute value, which allows context-dependent attackers to cause a denial of service… Affected: 4.7; 5.2 |
| CVE-2019-2503 | 6.4 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2017-3291 | 6.3 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2014-0147 | 6.2 | Feb 11 | Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or… Affected: 6.5 |
| CVE-2017-10356 | 6.2 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.4; 7.5; 7.6; 7.7 |
The 500 most important CVEs for this product (exploited first, then by severity)