EL
Product
Enterprise Linux For Scientific Computing
On CISA KEVExploited in the wildRansomware-linked
71
CVEs
9
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 32Medium 30Low 2
Watch
Add Enterprise Linux For Scientific Computing to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 7.0 |
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 6.0; 7.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 6.0; 7.0 |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 7.0 |
| CVE-2019-8720 In wildKEV | 8.8 | Mar 6 | WebKitGTK Memory Corruption Vulnerability Affected: 7.0 |
| CVE-2017-12615 RansomwareIn wildKEV | 8.1 | Sep 19 | When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g Affected: 7.0 |
| CVE-2021-4034 RansomwareIn wildKEV | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Affected: 7.0 |
| CVE-2013-1675 In wildKEV | 6.5 | May 16 | Mozilla Firefox Information Disclosure Vulnerability Affected: 6.0 |
| CVE-2015-4902 In wildKEV | 5.3 | Oct 21 | Oracle Java SE Integrity Check Vulnerability Affected: 6.0; 7.0 |
| CVE-2023-5869 | 8.8 | Dec 10 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification Affected: 7.0 |
| CVE-2022-4254 | 8.8 | Feb 1 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters Affected: 7.0 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 7.0 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 7.0 |
| CVE-2019-13747 | 8.8 | Dec 10 | Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13741 | 8.8 | Dec 10 | Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content Affected: 6.0; 6.0 |
| CVE-2019-13736 | 8.8 | Dec 10 | Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 6.0; 6.0 |
| CVE-2019-13735 | 8.8 | Dec 10 | Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13732 | 8.8 | Dec 10 | Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13730 | 8.8 | Dec 10 | Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2019-13729 | 8.8 | Dec 10 | Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13728 | 8.8 | Dec 10 | Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13727 | 8.8 | Dec 10 | Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13726 | 8.8 | Dec 10 | Buffer overflow in password manager in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13725 | 8.8 | Dec 10 | Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2016-2818 | 8.8 | Jun 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service… Affected: 6.0 |
| CVE-2020-25717 | 8.1 | Feb 18 | A flaw was found in the way Samba maps domain users to local users Affected: 7.0 |
| CVE-2024-0409 | 7.8 | Jan 18 | A flaw was found in the X.Org server Affected: 7.0 |
| CVE-2023-3972 | 7.8 | Nov 1 | A vulnerability was found in insights-client Affected: 7.0 |
| CVE-2023-5367 | 7.8 | Oct 25 | A out-of-bounds write flaw was found in the xorg-x11-server Affected: 7.0 |
| CVE-2023-3899 | 7.8 | Aug 23 | A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization Affected: 7.0 |
| CVE-2023-0494 | 7.8 | Mar 27 | A vulnerability was found in X.Org Affected: 7.0 |
| CVE-2022-0330 | 7.8 | Mar 25 | A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU Affected: 7.0 |
| CVE-2016-9675 | 7.8 | Dec 22 | openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045 Affected: 6.0 |
| CVE-2021-4091 | 7.5 | Feb 18 | A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches Affected: 7.0 |
| CVE-2019-6470 | 7.5 | Nov 1 | There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode Affected: 7.0 |
| CVE-2018-16881 | 7.5 | Jan 25 | A denial of service vulnerability was found in rsyslog in the imptcp module Affected: 7.0 |
| CVE-2015-3405 | 7.5 | Aug 9 | ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the… Affected: 6.0 |
| CVE-2020-25719 | 7.2 | Feb 18 | A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication Affected: 7.0 |
| CVE-2023-5455 | 6.5 | Jan 10 | A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA Affected: 7.0 |
| CVE-2019-13753 | 6.5 | Dec 10 | Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: 6.0; 6.0 |
| CVE-2019-13752 | 6.5 | Dec 10 | Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: 6.0; 6.0 |
| CVE-2019-13751 | 6.5 | Dec 10 | Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: 6.0; 6.0 |
| CVE-2019-13750 | 6.5 | Dec 10 | Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13749 | 6.5 | Dec 10 | Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13748 | 6.5 | Dec 10 | Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory… Affected: 6.0; 6.0 |
| CVE-2019-13746 | 6.5 | Dec 10 | Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13744 | 6.5 | Dec 10 | Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13743 | 6.5 | Dec 10 | Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13742 | 6.5 | Dec 10 | Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name Affected: 6.0; 6.0 |
| CVE-2019-13740 | 6.5 | Dec 10 | Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: 6.0; 6.0 |