EL
Product
Enterprise Linux Server Supplementary
84
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 2Low 1
Watch
Add Enterprise Linux Server Supplementary to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5178 | 9.8 | May 23 | Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 6.0 |
| CVE-2016-1666 | 9.8 | May 14 | Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 6.0 |
| CVE-2016-1662 | 9.8 | May 14 | extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote… Affected: 6.0 |
| CVE-2016-2051 | 9.8 | Jan 25 | Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have… Affected: 6.0 |
| CVE-2015-1276 | 9.8 | Jul 23 | Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers… Affected: 6.0 |
| CVE-2016-5177 | 8.8 | May 23 | Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via… Affected: 6.0 |
| CVE-2016-1663 | 8.8 | May 14 | The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before… Affected: 6.0 |
| CVE-2016-1660 | 8.8 | May 14 | Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause… Affected: 6.0 |
| CVE-2015-8540 | 8.8 | Apr 14 | Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19,… Affected: 5.0; 6.0 |
| CVE-2016-1661 | 8.0 | May 14 | Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which… Affected: 6.0 |
| CVE-2016-1665 | 6.5 | May 14 | The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote… Affected: 6.0 |
| CVE-2016-1664 | 4.3 | May 14 | The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward… Affected: 6.0 |
| CVE-2014-3566 | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… Affected: 5.0; 6.0; 7.0 |
| CVE-2015-1289 | – | Jul 23 | Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 6.0 |
| CVE-2015-1288 | – | Jul 23 | The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle… Affected: 6.0 |
| CVE-2015-1287 | – | Jul 23 | Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the… Affected: 6.0 |
| CVE-2015-1286 | – | Jul 23 | Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google Chrome before… Affected: 6.0 |
| CVE-2015-1285 | – | Jul 23 | The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a… Affected: 6.0 |
| CVE-2015-1284 | – | Jul 23 | The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a page's maximum number of… Affected: 6.0; 6.7.z |
| CVE-2015-1282 | – | Jul 23 | Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of… Affected: 6.0 |
| CVE-2015-1281 | – | Jul 23 | core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to… Affected: 6.0 |
| CVE-2015-1280 | – | Jul 23 | SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified… Affected: 6.0 |
| CVE-2015-1279 | – | Jul 23 | Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a… Affected: 6.0 |
| CVE-2015-1278 | – | Jul 23 | content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an… Affected: 6.0 |
| CVE-2015-1277 | – | Jul 23 | Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have… Affected: 6.0 |
| CVE-2015-1274 | – | Jul 23 | Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by… Affected: 6.0; 6.7.z |
| CVE-2015-1273 | – | Jul 23 | Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or… Affected: 6.0 |
| CVE-2015-1272 | – | Jul 23 | Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have… Affected: 6.0 |
| CVE-2015-1271 | – | Jul 23 | PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service… Affected: 6.0 |
| CVE-2015-1270 | – | Jul 23 | The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names… Affected: 6.0 |
| CVE-2015-1250 | – | May 1 | Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 6.0 |
| CVE-2015-1243 | – | May 1 | Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before… Affected: 6.0 |
| CVE-2015-3044 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass intended access… Affected: 6.0 |
| CVE-2015-3042 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-3041 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-3040 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory… Affected: 5.0; 6.0 |
| CVE-2015-3039 | – | Apr 14 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers… Affected: 5.0; 6.0 |
| CVE-2015-3038 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0360 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0358 | – | Apr 14 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers… Affected: 5.0; 6.0 |
| CVE-2015-0355 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0354 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0353 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0352 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0351 | – | Apr 14 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers… Affected: 5.0; 6.0 |
| CVE-2015-0350 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0349 | – | Apr 14 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers… Affected: 5.0; 6.0 |
| CVE-2015-0348 | – | Apr 14 | Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute… Affected: 5.0; 6.0 |
| CVE-2015-0347 | – | Apr 14 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or… Affected: 5.0; 6.0 |
| CVE-2015-0346 | – | Apr 14 | Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to… Affected: 5.0; 6.0 |