Enterprise Linux For Scientific Computing vulnerabilities

Product

Enterprise Linux For Scientific Computing

by Redhat · last CVE Jan 18, 2024

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities71 In the news1 Timeline

Severity mix

Critical 4High 32Medium 30Low 2

Severity

All severities71 Critical4 High32 Medium30 Low2

Exploitation

On CISA KEV9 Exploited in the wild9

Watch

Add Enterprise Linux For Scientific Computing to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2013-1675 In wildKEV	6.5	7%	May 16	Mozilla Firefox Information Disclosure Vulnerability Affected: 6.0
CVE-2015-4902 In wildKEV	5.3	14%	Oct 21	Oracle Java SE Integrity Check Vulnerability Affected: 6.0; 7.0
CVE-2023-5455	6.5	1%	Jan 10	A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA Affected: 7.0
CVE-2019-13753	6.5	2%	Dec 10	Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: 6.0; 6.0
CVE-2019-13752	6.5	2%	Dec 10	Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: 6.0; 6.0
CVE-2019-13751	6.5	2%	Dec 10	Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: 6.0; 6.0
CVE-2019-13750	6.5	2%	Dec 10	Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13749	6.5	2%	Dec 10	Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13748	6.5	1%	Dec 10	Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory… Affected: 6.0; 6.0
CVE-2019-13746	6.5	1%	Dec 10	Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13744	6.5	1%	Dec 10	Insufficient policy enforcement in cookies in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13743	6.5	1%	Dec 10	Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13742	6.5	1%	Dec 10	Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name Affected: 6.0; 6.0
CVE-2019-13740	6.5	1%	Dec 10	Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13739	6.5	1%	Dec 10	Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name Affected: 6.0; 6.0
CVE-2019-13738	6.5	1%	Dec 10	Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13737	6.5	1%	Dec 10	Insufficient policy enforcement in autocomplete in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory… Affected: 6.0; 6.0
CVE-2016-5009	6.5	2%	Jul 12	The handle_command function in mon/Monitor.cc in Ceph allows remote authenticated users to cause a denial of service (segmentation fault and ceph monitor crash) via an (1) empty… Affected: 7.0
CVE-2016-2124	5.9	2%	Feb 18	A flaw was found in the way samba implemented SMB1 authentication Affected: 7.0
CVE-2024-0408	5.5	0%	Jan 18	A flaw was found in the X.Org server Affected: 7.0
CVE-2019-7317	5.3	9%	Feb 4	png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: 6.0; 7.0
CVE-2017-15129	4.7	0%	Jan 9	A use-after-free vulnerability was found in network namespaces code affecting the Linux kernel before 4.14.11 Affected: 7.0
CVE-2019-13763	4.3	1%	Dec 10	Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via… Affected: 6.0; 6.0
CVE-2019-13761	4.3	1%	Dec 10	Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name Affected: 6.0; 6.0
CVE-2019-13759	4.3	1%	Dec 10	Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13758	4.3	1%	Dec 10	Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13757	4.3	1%	Dec 10	Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name Affected: 6.0; 6.0
CVE-2019-13756	4.3	1%	Dec 10	Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13755	4.3	1%	Dec 10	Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page Affected: 6.0; 6.0
CVE-2019-13754	4.3	1%	Dec 10	Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 6.0; 6.0