EL
Product
Enterprise Linux Hpc Node Eus
On CISA KEVExploited in the wild
81
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 20Medium 12Low 1
Watch
Add Enterprise Linux Hpc Node Eus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7981 | – | Nov 24 | The png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54, and 1.4.x before 1.4.17 allows remote attackers to obtain sensitive process memory… Affected: 7.2 |
| CVE-2015-4819 | – | Oct 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.44 and earlier, and 5.6.25 and earlier, allows local users to affect confidentiality, integrity, and availability via unknown… Affected: 7.2 |
| CVE-2015-4148 | – | Jun 9 | The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows… Affected: 7.1 |
| CVE-2015-4147 | – | Jun 9 | The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows… Affected: 7.1 |
| CVE-2015-4026 | – | Jun 9 | The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote… Affected: 7.1 |
| CVE-2015-4025 | – | Jun 9 | PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to… Affected: 7.1 |
| CVE-2015-4024 | – | Jun 9 | Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote… Affected: 7.1 |
| CVE-2015-4022 | – | Jun 9 | Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code… Affected: 7.1 |
| CVE-2015-4021 | – | Jun 9 | The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is… Affected: 7.1 |
| CVE-2015-3330 | – | Jun 9 | The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Apache HTTP Server 2.4.x is used, allows… Affected: 7.1 |
| CVE-2015-3329 | – | Jun 9 | Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to… Affected: 7.1 |
| CVE-2015-3307 | – | Jun 9 | The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap… Affected: 7.1 |
| CVE-2015-2783 | – | Jun 9 | ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information from process memory or cause a denial of… Affected: 7.1 |
| CVE-2015-1863 | – | Apr 28 | Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code via… Affected: 7.1 |
| CVE-2015-2787 | – | Mar 30 | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 allows… Affected: 7.1 |
| CVE-2015-2348 | – | Mar 30 | The move_uploaded_file implementation in ext/standard/basic_functions.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 truncates a pathname upon encountering a… Affected: 7.1 |
| CVE-2015-2301 | – | Mar 30 | Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to cause a denial of service… Affected: 7.1 |
| CVE-2014-9675 | – | Feb 8 | bdf/bdflib.c in FreeType before 2.5.4 identifies property names by only verifying that an initial substring is present, which allows remote attackers to discover heap pointer… Affected: 7.1 |
| CVE-2014-9674 | – | Feb 8 | The Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with adding to length values without validating the original values, which allows remote… Affected: 7.1 |
| CVE-2014-9673 | – | Feb 8 | Integer signedness error in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (heap-based buffer… Affected: 7.1 |
| CVE-2014-9671 | – | Feb 8 | Off-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4 allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 7.1 |
| CVE-2014-9670 | – | Feb 8 | Multiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (integer… Affected: 7.1 |
| CVE-2014-9669 | – | Feb 8 | Multiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to cause a denial of service (out-of-bounds read or memory corruption) or possibly have… Affected: 7.1 |
| CVE-2014-9667 | – | Feb 8 | sfnt/ttload.c in FreeType before 2.5.4 proceeds with offset+length calculations without restricting the values, which allows remote attackers to cause a denial of service (integer… Affected: 7.1 |
| CVE-2014-9666 | – | Feb 8 | The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote… Affected: 7.1 |
| CVE-2014-9664 | – | Feb 8 | FreeType before 2.5.4 does not check for the end of the data during certain parsing actions, which allows remote attackers to cause a denial of service (out-of-bounds read) or… Affected: 7.1 |
| CVE-2014-9663 | – | Feb 8 | The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote… Affected: 7.1 |
| CVE-2014-9661 | – | Feb 8 | type42/t42parse.c in FreeType before 2.5.4 does not consider that scanning can be incomplete without triggering an error, which allows remote attackers to cause a denial of… Affected: 7.1 |
| CVE-2014-9660 | – | Feb 8 | The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of… Affected: 7.1 |
| CVE-2014-9658 | – | Feb 8 | The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service… Affected: 7.1 |
| CVE-2014-9657 | – | Feb 8 | The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service… Affected: 7.1 |