LE
Product
Linux Enterprise
On CISA KEVExploited in the wild
97
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 61Medium 27Low 0
Watch
Add Linux Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-1702 | 6.5 | Jun 5 | The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote… Affected: 12.0 |
| CVE-2016-1699 | 6.5 | Jun 5 | WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the… Affected: 12.0 |
| CVE-2016-1698 | 6.5 | Jun 5 | The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which… Affected: 12.0 |
| CVE-2016-1689 | 6.5 | Jun 5 | Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or… Affected: 12.0 |
| CVE-2016-1688 | 6.5 | Jun 5 | The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows… Affected: 12.0 |
| CVE-2016-1687 | 6.5 | Jun 5 | The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive… Affected: 12.0 |
| CVE-2016-1686 | 6.5 | Jun 5 | The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles… Affected: 12.0 |
| CVE-2016-1685 | 6.5 | Jun 5 | core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service… Affected: 12.0 |
| CVE-2016-1677 | 6.5 | Jun 5 | uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by… Affected: 12.0 |
| CVE-2016-1654 | 6.5 | Apr 18 | The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid… Affected: 12.0 |
| CVE-2010-0629 | 6.5 | Apr 7 | Use-after-free vulnerability in kadmin/server/server_stubs.c in kadmind in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote authenticated users to cause a denial of… Affected: 11.0 |
| CVE-2009-2416 | 6.5 | Aug 11 | Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service… Affected: 10.0; 11.0 |
| CVE-2016-5325 | 6.1 | Oct 10 | CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote… Affected: 12.0 |
| CVE-2016-1682 | 6.1 | Jun 5 | The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before… Affected: 12.0 |
| CVE-2016-1652 | 6.1 | Apr 18 | Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome… Affected: 12.0 |
| CVE-2016-7099 | 5.9 | Oct 10 | The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name… Affected: 12.0 |
| CVE-2009-2408 | 5.9 | Jul 30 | Mozilla Network Security Services (NSS) before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a… Affected: 10.0; 11.0 |
| CVE-2008-4989 | 5.9 | Nov 13 | The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate is an arbitrary… Affected: 10.0; 11.0 |
| CVE-2024-23301 | 5.5 | Jan 12 | Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y Affected: 15.0 |
| CVE-2023-34256 | 5.5 | May 31 | An issue was discovered in the Linux kernel before 6.3.3 Affected: 12.0; 15.0; 15.0 |
| CVE-2016-8569 | 5.5 | Feb 3 | The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a… Affected: 12.0 |
| CVE-2016-8568 | 5.5 | Feb 3 | The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted… Affected: 12.0 |
| CVE-2016-2178 | 5.5 | Jun 20 | The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users… Affected: 12.0 |
| CVE-2016-1694 | 5.3 | Jun 5 | browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof… Affected: 12.0 |
| CVE-2016-1693 | 5.3 | Jun 5 | browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows… Affected: 12.0 |
| CVE-2016-1692 | 5.3 | Jun 5 | WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when… Affected: 12.0 |
| CVE-2009-1961 | 4.7 | Jun 8 | The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to… Affected: 11.0 |
Showing 27