EL
Product
Enterprise Linux Update Services For Sap Solutions
On CISA KEVExploited in the wildRansomware-linked
34
CVEs
6
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 22Medium 11Low 0
Watch
Add Enterprise Linux Update Services For Sap Solutions to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 8.1; 8.2; 8.4; 8.6; 8.8 |
| CVE-2025-31277 In wildKEV | 8.8 | Jul 29 | Apple Multiple Products Buffer Overflow Vulnerability Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2023-4911 In wildKEV | 7.8 | Oct 3 | Glibc: buffer overflow in ld.so leading to privilege escalation Affected: 9.2; 9.4; 9.6 |
| CVE-2019-0211 In wildKEV | 7.8 | Apr 8 | Apache HTTP Server Privilege Escalation Vulnerability Affected: 8.0; 8.1; 8.4; 8.6; 8.8 |
| CVE-2026-34486 In wildKEV | 7.5 | Apr 9 | Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor Affected: 8.8; 9.2; 9.4; 9.6 |
| CVE-2022-24805 | 8.8 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.4 |
| CVE-2024-3183 | 8.1 | Jun 12 | A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client’s session key Affected: 8.4; 8.6 |
| CVE-2026-4775 | 7.8 | Mar 24 | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2025-1756 | 7.8 | Feb 27 | mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a… Affected: 9.4 |
| CVE-2025-1755 | 7.8 | Feb 27 | MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges,… Affected: 9.0 |
| CVE-2024-0229 | 7.8 | Feb 9 | An out-of-bounds memory access flaw was found in the X.Org server Affected: 8.2; 8.4 |
| CVE-2023-3972 | 7.8 | Nov 1 | A vulnerability was found in insights-client Affected: 8.1; 8.2; 8.4; 8.6; 8.8 |
| CVE-2023-3899 | 7.8 | Aug 23 | A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization Affected: 8.1; 8.2; 8.4; 8.6; 8.8 |
| CVE-2024-12087 | 7.5 | Jan 14 | Rsync: path traversal vulnerability in rsync Affected: 9.6 |
| CVE-2024-12088 | 7.5 | Jan 14 | Rsync: --safe-links option bypass leads to path traversal Affected: 9.6 |
| CVE-2024-12085 | 7.5 | Jan 14 | Rsync: info leak via uninitialized stack contents Affected: 8.4; 8.6; 9.0; 9.2; 9.6 |
| CVE-2019-6470 | 7.5 | Nov 1 | There had existed in one of the ISC BIND libraries a bug in a function that was used by dhcpd when operating in DHCPv6 mode Affected: 8.1; 8.2; 8.4; 8.6; 8.8 |
| CVE-2025-3155 | 7.4 | Apr 3 | A flaw was found in Yelp Affected: 8.4; 8.6; 8.8; 9.0; 9.2; 9.4 |
| CVE-2026-58379 | 7.3 | Jul 3 | Gimp: gimp: heap buffer overflow in read_channel_data() Affected: 9.4 |
| CVE-2025-62230 | 7.3 | Oct 30 | A flaw was discovered in the X.Org X server’s X Keyboard (Xkb) extension when handling client resource cleanup Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2025-62231 | 7.3 | Oct 30 | A flaw was identified in the X.Org X server’s X Keyboard (Xkb) extension where improper bounds checking in the XkbSetCompatMap() function can cause an unsigned short overflow Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2023-3758 | 7.1 | Apr 18 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users Affected: 8.6; 8.8; 9.0; 9.2; 9.4; 9.6 |
| CVE-2020-14355 | 6.6 | Oct 7 | Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1 Affected: 8.0 |
| CVE-2026-39979 | 6.5 | Apr 13 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers Affected: 8.6; 8.8; 9.0; 9.2 |
| CVE-2025-2784 | 6.5 | Apr 3 | A flaw was found in libsoup Affected: 8.8; 9.0; 9.2; 9.4; 9.6 |
| CVE-2022-24809 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.4 |
| CVE-2022-24808 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.4 |
| CVE-2022-24807 | 6.5 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.4 |
| CVE-2023-5455 | 6.5 | Jan 10 | A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA Affected: 9.0; 9.2 |
| CVE-2024-1062 | 5.5 | Feb 12 | A heap overflow flaw was found in 389-ds-base Affected: 8.6; 8.8 |
| CVE-2023-6915 | 5.5 | Jan 15 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel Affected: 9.4; 9.6; 9.8 |
| CVE-2022-24806 | 5.3 | Apr 16 | net-snmp provides various tools relating to the Simple Network Management Protocol Affected: 9.4 |
| CVE-2024-9675 | 4.4 | Oct 9 | A vulnerability was found in Buildah Affected: 8.6; 8.8; 9.0; 9.2; 9.4 |
Showing 34
