EL
Product
Enterprise Linux Eus
On CISA KEVExploited in the wildRansomware-linked
789
CVEs
42
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 73High 196Medium 231Low 0
Watch
Add Enterprise Linux Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-1675 In wildKEV | 6.5 | May 16 | Mozilla Firefox Information Disclosure Vulnerability Affected: 5.9; 6.4 |
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: 6.7; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: 6.7; 7.2; 7.3; 7.4; 7.5; 7.6; +1 more |
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: 6.3; 6.4 |
| CVE-2015-4902 In wildKEV | 5.3 | Oct 21 | Oracle Java SE Integrity Check Vulnerability Affected: 6.7; 7.2; 7.3; 7.4; 7.5 |
| CVE-2021-20316 | 6.8 | Aug 23 | A flaw was found in the way Samba handled file/directory metadata Affected: 8.6 |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 7.7; 8.1 |
| CVE-2019-6109 | 6.8 | Jan 31 | An issue was discovered in OpenSSH 7.9 Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2017-10274 | 6.8 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 7.4; 7.5; 7.6; 7.7 |
| CVE-2017-10198 | 6.8 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.3; 7.4; 7.5; 7.6; 7.7 |
| CVE-2020-14355 | 6.6 | Oct 7 | Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1 Affected: 8.1 |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: 8.4; 9.4; 9.6; 10.0 |
| CVE-2025-2784 | 6.5 | Apr 3 | A flaw was found in libsoup Affected: 8.8; 9.2; 9.4; 9.6; 10.0 |
| CVE-2024-9676 | 6.5 | Oct 15 | A vulnerability was found in Podman, Buildah, and CRI-O Affected: 9.4 |
| CVE-2022-24809 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2; 9.4 |
| CVE-2022-24808 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2; 9.4 |
| CVE-2022-24807 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.2; 9.4 |
| CVE-2023-5455 | 6.5 | Jan 10 | A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA Affected: 8.6; 8.6; 8.8; 9.0; 9.2 |
| CVE-2023-42669 | 6.5 | Nov 6 | A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements Affected: 9.0 |
| CVE-2023-4091 | 6.5 | Nov 3 | A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only permissions when the Samba VFS module "acl_xattr" is configured… Affected: 9.0 |
| CVE-2023-4527 | 6.5 | Sep 18 | Glibc: stack read overflow in getaddrinfo in no-aaaa mode Affected: 8.8; 9.2 |
| CVE-2023-38201 | 6.5 | Aug 25 | A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent registration Affected: 9.2 |
| CVE-2021-3975 | 6.5 | Aug 23 | A use-after-free flaw was found in libvirt Affected: 8.6 |
| CVE-2021-3733 | 6.5 | Mar 7 | There's a flaw in urllib's AbstractBasicAuthHandler class Affected: 8.4 |
| CVE-2020-14301 | 6.5 | May 27 | An information disclosure vulnerability was found in libvirt in versions before 6.3.0 Affected: 8.4 |
| CVE-2019-19339 | 6.5 | Jan 17 | It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207 Affected: 8.1 |
| CVE-2019-16777 | 6.5 | Dec 13 | Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite Affected: 8.1 |
| CVE-2019-16775 | 6.5 | Dec 13 | Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write Affected: 8.1 |
| CVE-2019-2834 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2812 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2805 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2795 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2740 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-9959 | 6.5 | Jul 22 | The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2695 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2694 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2693 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-3460 | 6.5 | Apr 11 | A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1 Affected: 8.1; 8.2; 8.4 |
| CVE-2019-3459 | 6.5 | Apr 11 | A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1 Affected: 8.1; 8.2; 8.4 |
| CVE-2019-0757 | 6.5 | Apr 9 | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet… Affected: 8.1; 8.2; 8.4 |
| CVE-2019-9903 | 6.5 | Mar 21 | PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2455 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2533 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2529 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2019-2434 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-20662 | 6.5 | Jan 3 | In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-20650 | 6.5 | Jan 1 | A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use… Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-18897 | 6.5 | Nov 2 | An issue was discovered in Poppler 0.71.0 Affected: 8.1; 8.2; 8.4; 8.6 |
| CVE-2018-2819 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.5; 7.6; 7.7 |
| CVE-2018-2817 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.5; 7.6; 7.7 |
The 500 most important CVEs for this product (exploited first, then by severity)