Vendor/product archive

redhat / enterprise_linux_server_from_rhui CVEs

Beta · best-effort

12 CVEs tagged to redhat / enterprise_linux_server_from_rhui — 6 Critical, 1 High, 4 Medium, 1 Low, 0 Unrated.

See this archive with more filters Back to redhat vendor archive

CVE-2016-4117

Published May 11, 2016

Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

CVSS 9.8 · Critical

evidence mentions: 56
Buzz score: 71.0

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2016-3718

Published May 5, 2016

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted im…

CVSS 5.5 · Medium

evidence mentions: 1
Buzz score: 36.9

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2016-3715

Published May 5, 2016

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

CVSS 5.5 · Medium

evidence mentions: 1
Buzz score: 36.9

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2015-4902

Published Oct 22, 2015

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

CVSS 5.3 · Medium

evidence mentions: 4
Buzz score: 49.1

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2015-7645

Published Oct 15, 2015

Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code…

CVSS 7.8 · High

evidence mentions: 35
Buzz score: 69.5

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2015-3214

Published Aug 31, 2015

The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS user…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-5165

Published Aug 12, 2015

The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecifi…

CVSS 9.3 · Critical

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2015-5119

Published Jul 8, 2015

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows…

CVSS 9.8 · Critical

evidence mentions: 49
Buzz score: 72.5

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2015-3043

Published Apr 14, 2015

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cau…

CVSS 9.8 · Critical

evidence mentions: 11
Buzz score: 60.9

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2014-7169

Published Sep 25, 2014

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wr…

CVSS 9.8 · Critical

evidence mentions: 18
Buzz score: 63.9

KEV listed

Vendor/product tagsBeta · best-effort

CVE-2014-6271

Published Sep 24, 2014

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cr…

CVSS 9.8 · Critical

evidence mentions: 36
Buzz score: 83.6

KEV listedPublic PoC observed

Vendor/product tagsBeta · best-effort

CVE-2012-1717

Published Jun 16, 2012

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37…

CVSS 2.1 · Low

Vendor/product tagsBeta · best-effort

Showing 1-12 of 12 CVEsPage 1 of 1