EL
Product
Enterprise Linux Hpc Node
On CISA KEVExploited in the wild
146
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 36Medium 15Low 2
Watch
Add Enterprise Linux Hpc Node to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: 6.0; 7.0 |
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: 6.0; 7.0 |
| CVE-2016-5844 | 6.5 | Sep 21 | Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file Affected: 6.0; 7.0 |
| CVE-2015-4598 | 6.5 | May 16 | PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary… Affected: 7.0 |
| CVE-2015-3411 | 6.5 | May 16 | PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read or write to arbitrary… Affected: 7.0 |
| CVE-2016-2107 | 5.9 | May 5 | The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to… Affected: 7.0; 6.0 |
| CVE-2016-0695 | 5.9 | Apr 21 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related… Affected: 6.0; 7.0 |
| CVE-2015-3149 | 5.5 | Jul 25 | The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack Affected: 6.0; 7.0 |
| CVE-2016-5410 | 5.5 | Apr 19 | firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3)… Affected: 7.0 |
| CVE-2016-7796 | 5.5 | Oct 13 | The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which… Affected: 7.0 |
| CVE-2016-7166 | 5.5 | Sep 21 | libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application… Affected: 7.0; 6.0 |
| CVE-2016-4470 | 5.5 | Jun 27 | The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to… Affected: 7.0 |
| CVE-2016-3717 | 5.5 | May 5 | The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image Affected: 6.0; 7.0 |
| CVE-2015-3412 | 5.3 | May 16 | PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to read arbitrary files via… Affected: 7.0 |
| CVE-2016-7091 | 4.4 | Dec 22 | sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to… Affected: 7.0 |
Showing 15