EM
Product
Enterprise Mrg
73
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 15Medium 15Low 0
Watch
Add Enterprise Mrg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-3460 | 9.8 | Nov 21 | cumin: At installation postgresql database user created without password Affected: 2.0 |
| CVE-2018-16884 | 8.0 | Dec 18 | A flaw was found in the Linux kernel's NFS41+ subsystem Affected: 2.0 |
| CVE-2020-27786 | 7.8 | Dec 11 | A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a… Affected: 2.0 |
| CVE-2020-10757 | 7.8 | Jun 9 | A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages Affected: 2.0 |
| CVE-2017-7482 | 7.8 | Jul 30 | In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field Affected: 2.0 |
| CVE-2012-1097 | 7.8 | May 17 | The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial… Affected: 2.0 |
| CVE-2020-1749 | 7.5 | Sep 9 | A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6 Affected: 2.0 |
| CVE-2012-6685 | 7.5 | Feb 19 | Nokogiri before 1.5.4 is vulnerable to XXE attacks Affected: 2.0 |
| CVE-2019-11478 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective… Affected: 2.0 |
| CVE-2019-11477 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs) Affected: 2.0 |
| CVE-2014-3687 | 7.5 | Nov 10 | The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of… Affected: 2.0 |
| CVE-2014-3673 | 7.5 | Nov 10 | The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to… Affected: 2.0 |
| CVE-2011-2699 | 7.5 | May 24 | The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers… Affected: 2.0 |
| CVE-2011-2189 | 7.5 | Oct 10 | net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces, which makes it easier for… Affected: 2.0 |
| CVE-2016-3699 | 7.4 | Oct 7 | The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure… Affected: 2.0 |
| CVE-2019-14898 | 7.0 | May 8 | The fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete Affected: 2.0 |
| CVE-2013-6461 | 6.5 | Nov 5 | Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits Affected: 2.0 |
| CVE-2013-6460 | 6.5 | Nov 5 | Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents Affected: 2.0 |
| CVE-2019-3459 | 6.5 | Apr 11 | A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1 Affected: 2.0 |
| CVE-2014-3706 | 5.9 | Oct 18 | ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509 certificates Affected: 3.0 |
| CVE-2020-27825 | 5.7 | Dec 11 | A use-after-free flaw was found in kernel/trace/ring_buffer.c in Linux kernel (before 5.10-rc1) Affected: 2.0 |
| CVE-2014-8181 | 5.5 | Nov 6 | The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace Affected: 2.0 |
| CVE-2014-8171 | 5.5 | Feb 9 | The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadlock) by spawning new processes within a memory-constrained… Affected: 2.0 |
| CVE-2017-15128 | 5.5 | Jan 14 | A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13.12 Affected: 2.0 |
| CVE-2017-15127 | 5.5 | Jan 14 | A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13 Affected: 2.0 |
| CVE-2015-7837 | 5.5 | Sep 19 | The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended… Affected: 2.0 |
| CVE-2016-4470 | 5.5 | Jun 27 | The key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is initialized, which allows local users to… Affected: 2.0 |
| CVE-2015-1350 | 5.5 | May 2 | The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that underspecifies removing extended privilege attributes, which… Affected: 2.0 |
| CVE-2012-1090 | 5.5 | May 17 | The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as… Affected: 2.0 |
| CVE-2020-12826 | 5.3 | May 12 | A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2 Affected: 2.0 |
| CVE-2015-7553 | 4.7 | Sep 14 | Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_log module is loaded, allows local users to cause a denial… Affected: 2.0 |
| CVE-2015-2922 | – | May 27 | The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote… Affected: 2.5 |
| CVE-2012-2682 | – | Jul 19 | Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, allows attackers with certain database privileges to cause a denial of service (inaccessible page) via a… Affected: 2.5 |
| CVE-2014-0174 | – | Jul 11 | Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier… Affected: 2.5 |
| CVE-2014-3940 | – | Jun 5 | The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to cause a denial of service (memory corruption or system… Affected: 2.0 |
| CVE-2014-3917 | – | Jun 5 | kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, allows local users to obtain potentially sensitive single-bit… Affected: 2.0 |
| CVE-2013-6445 | – | Apr 30 | Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain… Affected: 2.5 |
| CVE-2011-4930 | – | Feb 10 | Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local… Affected: 1.3; 2.0 |
| CVE-2013-4461 | – | Dec 23 | SQL injection vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to execute arbitrary SQL commands via vectors related to the… Affected: 2.4 |
| CVE-2013-4414 | – | Dec 23 | Cross-site scripting (XSS) vulnerability in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 2.4 |
| CVE-2013-4405 | – | Dec 23 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface for cumin in Red Hat Enterprise MRG Grid 2.4 allow remote attackers to hijack the authentication of… Affected: 2.4 |
| CVE-2013-4404 | – | Dec 23 | cumin in Red Hat Enterprise MRG Grid 2.4 does not properly enforce user roles, which allows remote authenticated users to bypass intended role restrictions and obtain sensitive… Affected: 2.4 |
| CVE-2013-4255 | – | Oct 11 | The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL… Affected: 2.0; 2.1; 2.2; 2.3 |
| CVE-2009-5136 | – | Oct 11 | The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote… Affected: 1.0; 1.0.1; 1.0.2; 1.0.3; 1.1.1; 1.1.2; +2 more |
| CVE-2013-4345 | – | Oct 10 | Off-by-one error in the get_prng_bytes function in crypto/ansi_cprng.c in the Linux kernel through 3.11.4 makes it easier for context-dependent attackers to defeat cryptographic… Affected: 2.0; 2.1; 2.2; 2.3; 2.4 |
| CVE-2013-4284 | – | Oct 9 | Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafted Ajax update request Affected: 2.4 |
| CVE-2013-1892 | – | Oct 1 | MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a… Affected: 2.3 |
| CVE-2013-1909 | – | Aug 23 | The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509… Affected: 2.0 |
| CVE-2013-2164 | – | Jul 4 | The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from kernel memory via a read… Affected: 2.0 |
| CVE-2013-3301 | – | Apr 29 | The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified… Affected: 2.0 |