EL
Product
Enterprise Linux For Scientific Computing
On CISA KEVExploited in the wildRansomware-linked
71
CVEs
9
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 32Medium 30Low 2
Watch
Add Enterprise Linux For Scientific Computing to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13739 | 6.5 | Dec 10 | Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name Affected: 6.0; 6.0 |
| CVE-2019-13738 | 6.5 | Dec 10 | Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13737 | 6.5 | Dec 10 | Insufficient policy enforcement in autocomplete in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory… Affected: 6.0; 6.0 |
| CVE-2016-5009 | 6.5 | Jul 12 | The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty… Affected: 7.0 |
| CVE-2016-2124 | 5.9 | Feb 18 | A flaw was found in the way samba implemented SMB1 authentication Affected: 7.0 |
| CVE-2024-0408 | 5.5 | Jan 18 | A flaw was found in the X.Org server Affected: 7.0 |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: 6.0; 7.0 |
| CVE-2017-15129 | 4.7 | Jan 9 | A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11 Affected: 7.0 |
| CVE-2019-13763 | 4.3 | Dec 10 | Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via… Affected: 6.0; 6.0 |
| CVE-2019-13761 | 4.3 | Dec 10 | Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name Affected: 6.0; 6.0 |
| CVE-2019-13759 | 4.3 | Dec 10 | Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13758 | 4.3 | Dec 10 | Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13757 | 4.3 | Dec 10 | Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name Affected: 6.0; 6.0 |
| CVE-2019-13756 | 4.3 | Dec 10 | Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13755 | 4.3 | Dec 10 | Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13754 | 4.3 | Dec 10 | Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13762 | 3.3 | Dec 10 | Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code Affected: 6.0; 6.0 |
| CVE-2018-16866 | 3.3 | Jan 11 | An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':' Affected: 7.0 |
| CVE-2015-3214 | – | Aug 31 | The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS… Affected: 7.0 |
| CVE-2015-5165 | – | Aug 12 | The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via… Affected: 6.0; 7.0 |
| CVE-2012-1717 | – | Jun 16 | Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37… Affected: 6.0 |