LE
Product
Linux Enterprise
On CISA KEVExploited in the wild
97
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 61Medium 27Low 0
Watch
Add Linux Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-9957 | 7.8 | Apr 12 | Stack-based buffer overflow in game-music-emu before 0.6.1 Affected: 12.0 |
| CVE-2009-0749 | 7.8 | Mar 2 | Use-after-free vulnerability in the GIFReadNextExtension function in lib/pngxtern/gif/gifread.c in OptiPNG 0.6.2 and earlier allows context-dependent attackers to cause a denial… Affected: 9-11 |
| CVE-2020-14147 | 7.7 | Jun 15 | An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a… Affected: 12.0 |
| CVE-2021-41819 | 7.5 | Jan 1 | CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names Affected: 11.0; 12.0; 15.0 |
| CVE-2021-41817 | 7.5 | Jan 1 | Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string Affected: 12.0; 15.0 |
| CVE-2016-1700 | 7.5 | Jun 5 | extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows… Affected: 12.0 |
| CVE-2016-1691 | 7.5 | Jun 5 | Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or… Affected: 12.0 |
| CVE-2016-1690 | 7.5 | Jun 5 | The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows… Affected: 12.0 |
| CVE-2016-1683 | 7.5 | Jun 5 | numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service… Affected: 12.0 |
| CVE-2016-1656 | 7.5 | Apr 18 | The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors Affected: 12.0 |
| CVE-2010-0013 | 7.5 | Jan 9 | Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a Affected: 11.0 |
| CVE-2009-0949 | 7.5 | Jun 9 | The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of… Affected: 9.0; 10.0 |
| CVE-2016-7966 | 7.3 | Dec 23 | Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer Affected: 12.0 |
| CVE-2021-4166 | 7.1 | Dec 25 | Out-of-bounds Read in vim/vim Affected: 12.0; 15.0 |
| CVE-2016-1702 | 6.5 | Jun 5 | The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote… Affected: 12.0 |
| CVE-2016-1699 | 6.5 | Jun 5 | WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the… Affected: 12.0 |
| CVE-2016-1698 | 6.5 | Jun 5 | The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which… Affected: 12.0 |
| CVE-2016-1689 | 6.5 | Jun 5 | Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or… Affected: 12.0 |
| CVE-2016-1688 | 6.5 | Jun 5 | The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows… Affected: 12.0 |
| CVE-2016-1687 | 6.5 | Jun 5 | The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive… Affected: 12.0 |
| CVE-2016-1686 | 6.5 | Jun 5 | The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles… Affected: 12.0 |
| CVE-2016-1685 | 6.5 | Jun 5 | core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service… Affected: 12.0 |
| CVE-2016-1677 | 6.5 | Jun 5 | uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by… Affected: 12.0 |
| CVE-2016-1654 | 6.5 | Apr 18 | The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid… Affected: 12.0 |
| CVE-2010-0629 | 6.5 | Apr 7 | Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of… Affected: 11.0 |
| CVE-2009-2416 | 6.5 | Aug 11 | Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service… Affected: 10.0; 11.0 |
| CVE-2016-5325 | 6.1 | Oct 10 | CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote… Affected: 12.0 |
| CVE-2016-1682 | 6.1 | Jun 5 | The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before… Affected: 12.0 |
| CVE-2016-1652 | 6.1 | Apr 18 | Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome… Affected: 12.0 |
| CVE-2016-7099 | 5.9 | Oct 10 | The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name… Affected: 12.0 |
| CVE-2009-2408 | 5.9 | Jul 30 | Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a… Affected: 10.0; 11.0 |
| CVE-2008-4989 | 5.9 | Nov 13 | The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary… Affected: 10.0; 11.0 |
| CVE-2024-23301 | 5.5 | Jan 12 | Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y Affected: 15.0 |
| CVE-2023-34256 | 5.5 | May 31 | An issue was discovered in the Linux kernel before 6.3.3 Affected: 12.0; 15.0; 15.0 |
| CVE-2016-8569 | 5.5 | Feb 3 | The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a… Affected: 12.0 |
| CVE-2016-8568 | 5.5 | Feb 3 | The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted… Affected: 12.0 |
| CVE-2016-2178 | 5.5 | Jun 20 | The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users… Affected: 12.0 |
| CVE-2016-1694 | 5.3 | Jun 5 | browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof… Affected: 12.0 |
| CVE-2016-1693 | 5.3 | Jun 5 | browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows… Affected: 12.0 |
| CVE-2016-1692 | 5.3 | Jun 5 | WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when… Affected: 12.0 |
| CVE-2009-1961 | 4.7 | Jun 8 | The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to… Affected: 11.0 |
| CVE-2015-1241 | – | Apr 19 | Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers… Affected: 12.0 |
| CVE-2013-4480 | – | Nov 18 | Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator… Affected: 11.0 |
| CVE-2010-4180 | – | Dec 6 | OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session… Affected: 11.0 |
| CVE-2009-3231 | – | Sep 17 | The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass… Affected: 10.0; 11.0 |
| CVE-2009-0040 | – | Feb 22 | The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of… Affected: 9.0; 10.0 |
| CVE-2008-6123 | – | Feb 12 | The netsnmp_udp_fmtaddr function (snmplib/snmpUDPDomain.c) in net-snmp 5.0.9 through 5.4.2.1, when using TCP wrappers for client authorization, does not properly parse hosts.allow… Affected: 9-11 |