EL
Product
Enterprise Linux Server Tus
On CISA KEVExploited in the wildRansomware-linked
765
CVEs
21
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 106High 264Medium 130Low 0
Watch
Add Enterprise Linux Server Tus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: 7.2; 7.3; 7.6; 7.7 |
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: 7.2; 7.3; 7.6; 7.7 |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 7.7 |
| CVE-2019-6109 | 6.8 | Jan 31 | An issue was discovered in OpenSSH 7.9 Affected: 8.2; 8.4; 8.6 |
| CVE-2018-2634 | 6.8 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS) Affected: 7.4; 7.6 |
| CVE-2017-10274 | 6.8 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 7.4; 7.6; 7.7 |
| CVE-2017-10198 | 6.8 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 7.3; 7.4; 7.6; 7.7 |
| CVE-2021-20225 | 6.7 | Mar 3 | A flaw was found in grub2 in versions prior to 2.06 Affected: 7.4; 7.6; 7.7; 8.2 |
| CVE-2020-27749 | 6.7 | Mar 3 | A flaw was found in grub2 in versions prior to 2.06 Affected: 7.4; 7.6; 7.7; 8.2 |
| CVE-2019-6133 | 6.7 | Jan 11 | In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, and therefore authorization decisions are improperly cached Affected: 7.6 |
| CVE-2018-1068 | 6.7 | Mar 16 | A flaw was found in the Linux 4.x kernel's implementation of 32-bit syscall interface for bridging Affected: 7.6 |
| CVE-2018-14665 | 6.6 | Oct 25 | A flaw was found in xorg-x11-server before 1.20.3 Affected: 7.6 |
| CVE-2017-3600 | 6.6 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump) Affected: 7.6 |
| CVE-2025-2784 | 6.5 | Apr 3 | A flaw was found in libsoup Affected: 8.6; 8.8 |
| CVE-2023-5455 | 6.5 | Jan 10 | A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA Affected: 8.2; 8.4; 8.6 |
| CVE-2021-3975 | 6.5 | Aug 23 | A use-after-free flaw was found in libvirt Affected: 8.6 |
| CVE-2021-3733 | 6.5 | Mar 7 | There's a flaw in urllib's AbstractBasicAuthHandler class Affected: 8.4 |
| CVE-2015-3147 | 6.5 | Jan 14 | daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or… Affected: 7.3; 7.6; 7.7 |
| CVE-2019-2834 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2812 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2805 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2795 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2740 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-9959 | 6.5 | Jul 22 | The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to… Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2695 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2694 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2693 | 6.5 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-3460 | 6.5 | Apr 11 | A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1 Affected: 8.2; 8.4 |
| CVE-2019-3459 | 6.5 | Apr 11 | A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1 Affected: 8.2; 8.4 |
| CVE-2019-0757 | 6.5 | Apr 9 | A tampering vulnerability exists in the NuGet Package Manager for Linux and Mac that could allow an authenticated attacker to modify a NuGet package's folder structure, aka 'NuGet… Affected: 8.2; 8.4 |
| CVE-2019-9903 | 6.5 | Mar 21 | PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find() located at Dict.cc, which can (for example) be… Affected: 8.2; 8.4; 8.6 |
| CVE-2018-18494 | 6.5 | Feb 28 | A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using… Affected: 7.6 |
| CVE-2018-12396 | 6.5 | Feb 28 | A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events Affected: 7.6 |
| CVE-2019-2455 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2434 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2529 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 8.2; 8.4; 8.6 |
| CVE-2019-2533 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: 8.2; 8.4; 8.6 |
| CVE-2018-20662 | 6.5 | Jan 3 | In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service (application crash caused by Object.h SIGABRT, because of a wrong return value from… Affected: 8.2; 8.4; 8.6 |
| CVE-2018-20650 | 6.5 | Jan 1 | A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of service due to the lack of a check for the dict data type, as demonstrated by use… Affected: 8.2; 8.4; 8.6 |
| CVE-2018-18897 | 6.5 | Nov 2 | An issue was discovered in Poppler 0.71.0 Affected: 8.2; 8.4; 8.6 |
| CVE-2016-2125 | 6.5 | Oct 31 | It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication Affected: 7.3; 7.6 |
| CVE-2018-12366 | 6.5 | Oct 18 | An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value Affected: 7.6 |
| CVE-2018-12365 | 6.5 | Oct 18 | A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction Affected: 7.6 |
| CVE-2018-5185 | 6.5 | Jun 11 | Plaintext of decrypted emails can leak through by user submitting an embedded form Affected: 7.6 |
| CVE-2018-2819 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 7.6; 7.7 |
| CVE-2018-2817 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 7.6; 7.7 |
| CVE-2016-9600 | 6.5 | Mar 12 | JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files Affected: 7.3; 7.6 |
| CVE-2014-8130 | 6.5 | Mar 12 | The _TIFFmalloc function in tif_unix.c in LibTIFF 4.0.3 does not reject a zero size, which allows remote attackers to cause a denial of service (divide-by-zero error and… Affected: 7.2; 7.3 |
| CVE-2018-2668 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.6; 7.7 |
| CVE-2018-2665 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 7.6; 7.7 |
The 500 most important CVEs for this product (exploited first, then by severity)