EL
Product
Enterprise Linux Server Tus
On CISA KEVExploited in the wildRansomware-linked
765
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 106High 264Medium 130Low 0
Watch
Add Enterprise Linux Server Tus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-5618 | 9.8 | Dec 11 | Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x… Affected: 6.5 |
| CVE-2013-5616 | 9.8 | Dec 11 | Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and… Affected: 6.5 |
| CVE-2013-5613 | 9.8 | Dec 11 | Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey… Affected: 6.5 |
| CVE-2013-5609 | 9.8 | Dec 11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow… Affected: 6.5 |
| CVE-2017-10346 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 7.4; 7.6; 7.7 |
| CVE-2017-10285 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.4; 7.6; 7.7 |
| CVE-2017-10111 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.3; 7.6; 7.7 |
| CVE-2017-10110 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2017-10107 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2017-10101 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.3; 7.4; 7.6 |
| CVE-2017-10096 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.3; 7.6; 7.7 |
| CVE-2017-10090 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2017-10089 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO) Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2017-10087 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.4; 7.6; 7.7 |
| CVE-2018-12387 | 9.1 | Oct 18 | A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout Affected: 7.6 |
| CVE-2016-5018 | 9.1 | Aug 10 | In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured… Affected: 7.6; 7.7 |
| CVE-2017-9788 | 9.1 | Jul 13 | In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between… Affected: 7.2; 7.3; 7.4; 7.6 |
| CVE-2014-1508 | 9.1 | Mar 19 | The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers… Affected: 6.5 |
| CVE-2018-3183 | 9.0 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting) Affected: 7.6 |
| CVE-2017-10102 | 9.0 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2023-5869 | 8.8 | Dec 10 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification Affected: 8.2; 8.4; 8.6 |
| CVE-2023-2203 | 8.8 | May 17 | A flaw was found in the WebKitGTK package Affected: 8.8 |
| CVE-2022-4254 | 8.8 | Feb 1 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters Affected: 8.2 |
| CVE-2022-1227 | 8.8 | Apr 29 | A privilege escalation flaw was found in Podman Affected: 8.6 |
| CVE-2022-0435 | 8.8 | Mar 25 | A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes… Affected: 8.2; 8.4 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 7.6; 7.7; 8.2; 8.4 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 8.2; 8.4 |
| CVE-2021-3621 | 8.8 | Dec 23 | A flaw was found in SSSD, where the sssctl command was vulnerable to shell command injection via the logs-fetch and cache-expire subcommands Affected: 8.2; 8.4 |
| CVE-2013-4535 | 8.8 | Feb 11 | The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or… Affected: 6.5 |
| CVE-2019-17024 | 8.8 | Jan 8 | Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3 Affected: 7.7; 8.2; 8.4 |
| CVE-2019-17017 | 8.8 | Jan 8 | Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash Affected: 7.7 |
| CVE-2019-13734 | 8.8 | Dec 10 | Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 7.7; 8.2; 8.4 |
| CVE-2019-14287 | 8.8 | Oct 17 | In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by… Affected: 7.2; 7.3; 7.4; 7.6; 7.7; 8.2; +1 more |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: 7.7 |
| CVE-2019-12527 | 8.8 | Jul 11 | An issue was discovered in Squid 4.0.23 through 4.7 Affected: 8.2; 8.4; 8.6 |
| CVE-2019-9810 | 8.8 | Apr 26 | Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow Affected: 8.2; 8.4 |
| CVE-2019-3856 | 8.8 | Mar 25 | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed Affected: 7.6 |
| CVE-2019-3857 | 8.8 | Mar 25 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are… Affected: 7.6 |
| CVE-2019-3863 | 8.8 | Mar 25 | A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side Affected: 7.6 |
| CVE-2019-3855 | 8.8 | Mar 21 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server Affected: 7.6 |
| CVE-2018-12389 | 8.8 | Feb 28 | Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2 Affected: 7.6 |
| CVE-2018-18356 | 8.8 | Dec 11 | An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a… Affected: 7.6 |
| CVE-2018-17466 | 8.8 | Nov 14 | Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page Affected: 7.6 |
| CVE-2018-15688 | 8.8 | Oct 26 | A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd Affected: 7.6 |
| CVE-2018-12364 | 8.8 | Oct 18 | NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site Affected: 7.6 |
| CVE-2018-12363 | 8.8 | Oct 18 | A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the… Affected: 7.6 |
| CVE-2018-12362 | 8.8 | Oct 18 | An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash Affected: 7.6 |
| CVE-2018-12360 | 8.8 | Oct 18 | A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element Affected: 7.6 |
| CVE-2018-12359 | 8.8 | Oct 18 | A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the… Affected: 7.6 |
| CVE-2018-1000805 | 8.8 | Oct 8 | Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE Affected: 6.6; 7.6 |
The 500 most important CVEs for this product (exploited first, then by severity)