EL
Product
Enterprise Linux Workstation
On CISA KEVExploited in the wildRansomware-linked
1,841
CVEs
58
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 251High 245Medium 4Low 0
Watch
Add Enterprise Linux Workstation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: 6.0; 7.0 |
| CVE-2019-11043 RansomwareIn wildKEV | 9.8 | Oct 28 | Underflow in PHP-FPM can lead to RCE Affected: 6.0; 7.0 |
| CVE-2016-4171 In wildKEV | 9.8 | Jun 16 | Adobe Flash Player Remote Code Execution Vulnerability Affected: 5.0; 6.0 |
| CVE-2016-4117 RansomwareIn wildKEV | 9.8 | May 11 | Adobe Flash Player Arbitrary Code Execution Vulnerability Affected: 5.0; 6.0 |
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: 5.0; 6.0; 7.0 |
| CVE-2015-2590 In wildKEV | 9.8 | Jul 16 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Affected: 5.0; 6.0; 7.0 |
| CVE-2015-5122 In wildKEV | 9.8 | Jul 14 | Adobe Flash Player Use-After-Free Vulnerability Affected: 5.0; 6.0 |
| CVE-2015-5123 In wildKEV | 9.8 | Jul 14 | Adobe Flash Player Use-After-Free Vulnerability Affected: 5.0; 6.0 |
| CVE-2015-5119 In wildKEV | 9.8 | Jul 8 | Adobe Flash Player Use-After-Free Vulnerability Affected: 5.0; 6.0 |
| CVE-2015-3113 In wildKEV | 9.8 | Jun 23 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability Affected: 6.0 |
| CVE-2015-3043 In wildKEV | 9.8 | Apr 14 | Adobe Flash Player Memory Corruption Vulnerability Affected: 5.0; 6.0 |
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 5.0; 6.0; 7.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 5.0; 6.0; 7.0 |
| CVE-2014-0497 In wildKEV | 9.8 | Feb 5 | Adobe Flash Player Integer Underflow Vulnerablity Affected: 5.0; 6.0 |
| CVE-2013-2729 In wildKEV | 9.8 | May 16 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability Affected: 6.0 |
| CVE-2012-4681 RansomwareIn wildKEV | 9.8 | Aug 28 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 6.0 |
| CVE-2012-1723 RansomwareIn wildKEV | 9.8 | Jun 16 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 5.0; 6.0 |
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: 5.0; 6.0 |
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 7.0 |
| CVE-2018-18505 | 10.0 | Feb 5 | An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC… Affected: 6.0; 7.0 |
| CVE-2016-9603 | 9.9 | Jul 27 | A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update… Affected: 6.0; 7.0 |
| CVE-2017-2620 | 9.9 | Jul 27 | Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue Affected: 6.0; 7.0 |
| CVE-2009-3616 | 9.9 | Oct 23 | Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a… Affected: 5.0 |
| CVE-2023-6816 | 9.8 | Jan 18 | A flaw was found in X.Org server Affected: 7.0 |
| CVE-2019-15605 | 9.8 | Feb 7 | HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed Affected: 7.0 |
| CVE-2019-14813 | 9.8 | Sep 6 | A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass… Affected: 7.0 |
| CVE-2019-1010238 | 9.8 | Jul 19 | Gnome Pango 1.42 and later is affected by: Buffer Overflow Affected: 7.0 |
| CVE-2019-10126 | 9.8 | Jun 14 | A flaw was found in the Linux kernel Affected: 7.0 |
| CVE-2019-10160 | 9.8 | Jun 7 | A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4… Affected: 7.0 |
| CVE-2019-11235 | 9.8 | Apr 22 | FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve… Affected: 7.0 |
| CVE-2019-9636 | 9.8 | Mar 8 | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization Affected: 6.0 |
| CVE-2018-18493 | 9.8 | Feb 28 | A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of… Affected: 6.0; 7.0 |
| CVE-2018-12405 | 9.8 | Feb 28 | Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3 Affected: 6.0; 7.0 |
| CVE-2018-12390 | 9.8 | Feb 28 | Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2 Affected: 6.0; 7.0 |
| CVE-2018-12392 | 9.8 | Feb 28 | When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling Affected: 6.0; 7.0 |
| CVE-2018-18498 | 9.8 | Feb 28 | A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value Affected: 6.0; 7.0 |
| CVE-2018-18492 | 9.8 | Feb 28 | A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection Affected: 6.0; 7.0 |
| CVE-2018-12549 | 9.8 | Feb 11 | In Eclipse OpenJ9 version 0.11.0, the OpenJ9 JIT compiler may incorrectly omit a null check on the receiver object of an Unsafe call when accelerating it Affected: 6.0; 7.0 |
| CVE-2018-12547 | 9.8 | Feb 11 | In Eclipse OpenJ9, prior to the 0.12.0 release, the jio_snprintf() and jio_vsnprintf() native methods ignored the length parameter Affected: 6.0; 7.0 |
| CVE-2018-18501 | 9.8 | Feb 5 | Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4 Affected: 6.0; 7.0 |
| CVE-2018-18500 | 9.8 | Feb 5 | A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements Affected: 6.0; 7.0 |
| CVE-2018-15127 | 9.8 | Dec 19 | LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code… Affected: 7.0 |
| CVE-2018-18311 | 9.8 | Dec 7 | Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations Affected: 7.0 |
| CVE-2018-15981 | 9.8 | Nov 29 | Flash Player versions 31.0.0.148 and earlier have a type confusion vulnerability Affected: 6.0 |
| CVE-2018-8787 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function gdi_Bitmap_Decompress() and results in a memory corruption… Affected: 7.0 |
| CVE-2018-8786 | 9.8 | Nov 29 | FreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based Buffer Overflow in function update_read_bitmap_update() and results in a memory… Affected: 7.0 |
| CVE-2018-19409 | 9.8 | Nov 21 | An issue was discovered in Artifex Ghostscript before 9.26 Affected: 7.0 |
| CVE-2018-19115 | 9.8 | Nov 8 | keepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting in DoS or possibly unspecified other impact, because extract_status_code in… Affected: 7.0 |
| CVE-2018-5188 | 9.8 | Oct 18 | Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8 Affected: 6.0; 7.0 |
| CVE-2018-5156 | 9.8 | Oct 18 | A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring Affected: 6.0; 7.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
