EL
Product
Enterprise Linux Eus
On CISA KEVExploited in the wildRansomware-linked
789
CVEs
42
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 73High 196Medium 231Low 0
Watch
Add Enterprise Linux Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 7.7; 8.1; 8.2; 8.4; 8.6; 8.8 |
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: 6.7; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2015-2590 In wildKEV | 9.8 | Jul 16 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Affected: 6.6; 6.7; 7.1; 7.2; 7.3; 7.4; +1 more |
| CVE-2015-5119 In wildKEV | 9.8 | Jul 8 | Adobe Flash Player Use-After-Free Vulnerability Affected: 6.6 |
| CVE-2015-3113 In wildKEV | 9.8 | Jun 23 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Affected: 6.6 |
| CVE-2015-3043 In wildKEV | 9.8 | Apr 14 | Adobe Flash Player Memory Corruption Vulnerability Affected: 6.6 |
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 5.9; 6.4; 6.5; 7.3; 7.4; 7.5; +2 more |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 5.9; 6.4; 6.5; 7.3; 7.4; 7.5; +2 more |
| CVE-2014-0497 In wildKEV | 9.8 | Feb 5 | Adobe Flash Player Integer Underflow Vulnerablity Affected: 6.5 |
| CVE-2013-2729 In wildKEV | 9.8 | May 16 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Affected: 5.9; 6.4 |
| CVE-2012-4681 RansomwareIn wildKEV | 9.8 | Aug 28 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 6.3 |
| CVE-2012-1723 RansomwareIn wildKEV | 9.8 | Jun 16 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 6.2 |
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: 5.6; 6.1; 6.2 |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 8.1; 8.2; 8.4; 8.6; 8.8 |
| CVE-2026-1709 | 9.8 | Feb 6 | Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication Affected: 10.0 |
| CVE-2023-3961 | 9.8 | Nov 3 | A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory Affected: 9.0 |
| CVE-2019-15606 | 9.8 | Feb 7 | Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons Affected: 8.1 |
| CVE-2019-15605 | 9.8 | Feb 7 | HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed Affected: 7.7; 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-1010238 | 9.8 | Jul 19 | Gnome Pango 1.42 and later is affected by: Buffer Overflow Affected: 7.4; 7.6; 8.1; 8.2; 8.4 |
| CVE-2019-10126 | 9.8 | Jun 14 | A flaw was found in the Linux kernel Affected: 7.7; 8.1; 8.2; 8.4 |
| CVE-2019-10160 | 9.8 | Jun 7 | A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4… Affected: 7.6 |
| CVE-2019-11356 | 9.8 | Jun 3 | The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an… Affected: 8.1; 8.2; 8.4 |
| CVE-2019-12450 | 9.8 | May 29 | file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-9792 | 9.8 | Apr 26 | The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout Affected: 8.1; 8.2; 8.4 |
| CVE-2019-9791 | 9.8 | Apr 26 | The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT)… Affected: 8.1; 8.2; 8.4 |
| CVE-2019-9788 | 9.8 | Apr 26 | Mozilla developers and community members reported memory safety bugs present in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5 Affected: 8.1; 8.2; 8.4 |
| CVE-2019-11235 | 9.8 | Apr 22 | FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve… Affected: 7.6 |
| CVE-2019-0160 | 9.8 | Mar 27 | Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access Affected: 8.1; 8.2; 8.4 |
| CVE-2019-9636 | 9.8 | Mar 8 | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization Affected: 7.5; 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-7164 | 9.8 | Feb 20 | SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter Affected: 8.1; 8.2; 8.4 |
| CVE-2018-18311 | 9.8 | Dec 7 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations Affected: 7.6 |
| CVE-2018-8787 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption… Affected: 7.6 |
| CVE-2017-7824 | 9.8 | Jun 11 | A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content Affected: 7.4; 7.5 |
| CVE-2016-9901 | 9.8 | Jun 11 | HTML tags received from the Pocket server will be processed without sanitization and any JavaScript code executed will be run in the "about:pocket-saved" (unprivileged) page,… Affected: 7.3; 7.4; 7.5 |
| CVE-2018-1312 | 9.8 | Mar 26 | In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random… Affected: 7.6 |
| CVE-2018-8088 | 9.8 | Mar 20 | org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-18017 | 9.8 | Jan 3 | The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service… Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2017-15041 | 9.8 | Oct 5 | Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution Affected: 7.6; 7.7 |
| CVE-2017-3167 | 9.8 | Jun 20 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to… Affected: 6.7; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2016-9843 | 9.8 | May 23 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation Affected: 7.4; 7.5 |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 7.4; 7.5 |
| CVE-2016-1908 | 9.8 | Apr 11 | The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows… Affected: 7.2; 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2015-8391 | 9.8 | Dec 2 | The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or… Affected: 7.2; 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2014-1532 | 9.8 | Apr 30 | Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird… Affected: 6.5 |
| CVE-2014-1524 | 9.8 | Apr 30 | The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not… Affected: 6.5 |
| CVE-2014-1514 | 9.8 | Mar 19 | vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the… Affected: 6.5 |
| CVE-2014-1511 | 9.8 | Mar 19 | Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified… Affected: 6.5 |
| CVE-2014-1510 | 9.8 | Mar 19 | The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute… Affected: 6.5 |
| CVE-2014-1493 | 9.8 | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow… Affected: 6.5 |
| CVE-2014-1486 | 9.8 | Feb 6 | Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24… Affected: 6.5 |
The 500 most important CVEs for this product (exploited first, then by severity)