EL
Product
Enterprise Linux Server
On CISA KEVExploited in the wildRansomware-linked
1,886
CVEs
59
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 263High 233Medium 4Low 0
Watch
Add Enterprise Linux Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-3183 | 9.0 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting) Affected: 6.0; 7.0 |
| CVE-2017-10102 | 9.0 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 6.0; 7.0 |
| CVE-2015-7512 | 9.0 | Jan 8 | Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash)… Affected: 6.0 |
| CVE-2023-5869 | 8.8 | Dec 10 | A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification Affected: 7.0 |
| CVE-2022-4254 | 8.8 | Feb 1 | sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters Affected: 7.0 |
| CVE-2022-1227 | 8.8 | Apr 29 | A privilege escalation flaw was found in Podman Affected: 7.0 |
| CVE-2021-3656 | 8.8 | Mar 4 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization Affected: 7.0 |
| CVE-2021-44142 | 8.8 | Feb 21 | The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP… Affected: 7.0; 8.1 |
| CVE-2019-8846 | 8.8 | Oct 27 | A use after free issue was addressed with improved memory management Affected: 7.0 |
| CVE-2019-8844 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8835 | 8.8 | Oct 27 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2020-14300 | 8.8 | Jul 13 | The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)… Affected: 7.0 |
| CVE-2020-14298 | 8.8 | Jul 13 | The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which… Affected: 7.0 |
| CVE-2020-10531 | 8.8 | Mar 12 | An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1 Affected: 6.0 |
| CVE-2020-6386 | 8.8 | Feb 27 | Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6384 | 8.8 | Feb 27 | Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6383 | 8.8 | Feb 27 | Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-3757 | 8.8 | Feb 13 | Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type confusion vulnerability Affected: 6.0 |
| CVE-2013-4535 | 8.8 | Feb 11 | The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or… Affected: 6.0 |
| CVE-2020-6416 | 8.8 | Feb 11 | Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6415 | 8.8 | Feb 11 | Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6406 | 8.8 | Feb 11 | Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6404 | 8.8 | Feb 11 | Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6402 | 8.8 | Feb 11 | Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute… Affected: 6.0 |
| CVE-2020-6398 | 8.8 | Feb 11 | Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 6.0 |
| CVE-2020-6390 | 8.8 | Feb 11 | Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6385 | 8.8 | Feb 11 | Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page Affected: 6.0 |
| CVE-2020-6382 | 8.8 | Feb 11 | Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2020-6381 | 8.8 | Feb 11 | Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML… Affected: 6.0 |
| CVE-2019-17024 | 8.8 | Jan 8 | Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3 Affected: 6.0; 7.0 |
| CVE-2019-17017 | 8.8 | Jan 8 | Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash Affected: 6.0; 7.0 |
| CVE-2019-8816 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8815 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8814 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8689 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8688 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8684 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8676 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8672 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8669 | 8.8 | Dec 18 | Multiple memory corruption issues were addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8544 | 8.8 | Dec 18 | A memory corruption issue was addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8536 | 8.8 | Dec 18 | A memory corruption issue was addressed with improved memory handling Affected: 7.0 |
| CVE-2019-8535 | 8.8 | Dec 18 | A memory corruption issue was addressed with improved state management Affected: 7.0 |
| CVE-2019-13764 | 8.8 | Dec 10 | Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0 |
| CVE-2019-13747 | 8.8 | Dec 10 | Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13741 | 8.8 | Dec 10 | Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content Affected: 6.0; 6.0 |
| CVE-2019-13736 | 8.8 | Dec 10 | Integer overflow in PDFium in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 6.0; 6.0 |
| CVE-2019-13735 | 8.8 | Dec 10 | Out of bounds write in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page Affected: 6.0; 6.0 |
| CVE-2019-13734 | 8.8 | Dec 10 | Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 7.0 |
| CVE-2019-13732 | 8.8 | Dec 10 | Use-after-free in WebAudio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 6.0; 6.0 |
The 500 most important CVEs for this product (exploited first, then by severity)