redhat

5,768 tracked vulnerabilities.

CVE-2017-5035 HIGH
Google Chrome <57.0.2987.98 - Info Disclosure
Apr 24, 2017
CVSS 8.1
EPSS 0.01
CVE-2017-5033 MEDIUM
Google Chrome <57.0.2987.98-57.0.2987.108 - XSS
Apr 24, 2017
CVSS 4.3
EPSS 0.01
CVE-2017-5030 HIGH KEV
Google Chrome <57.0.2987.98-57.0.2987.108 - RCE
Apr 24, 2017
CVSS 8.8
EPSS 0.42
CVE-2017-5029 HIGH
Google Chrome < 57.0.2987.98 - Out-of-bounds Write via xsltAddTextString Integer Overflow
Apr 24, 2017
CVSS 8.8
EPSS 0.02
CVE-2017-3600 MEDIUM
MySQL Server <= 5.5.54, <= 5.6.35, <= 5.7.17 - Authenticated Remote Code Execution in mysqldump
Apr 24, 2017
CVSS 6.6
EPSS 0.03
CVE-2017-3544 LOW
Oracle Java SE <8u121 - Unauthenticated RCE
Apr 24, 2017
CVSS 3.7
EPSS 0.02
CVE-2017-3539 LOW
Oracle Java SE < 8u121 - Info Disclosure
Apr 24, 2017
CVSS 3.1
EPSS 0.02
CVE-2017-3533 LOW
Oracle JDK and JRE 6u141, 7u131, 8u121 and JRockit R28.3.13 - Unauthenticated Data Manipulation via FTP
Apr 24, 2017
CVSS 3.7
EPSS 0.03
CVE-2017-3512 HIGH
Oracle JDK and JRE - Remote Code Execution via AWT
Apr 24, 2017
CVSS 8.3
EPSS 0.03
CVE-2017-3464 MEDIUM
MySQL Server <= 5.5.54, <= 5.6.35, <= 5.7.17 - Authenticated Unauthorized Data Manipulation via DDL
Apr 24, 2017
CVSS 4.3
EPSS 0.02
CVE-2017-3456 MEDIUM
MySQL Server <= 5.5.54, 5.6.35, 5.7.17 - Authenticated Denial of Service in Server: DML
Apr 24, 2017
CVSS 4.9
EPSS 0.03
CVE-2017-3453 MEDIUM
MySQL 5.5.0-5.5.54, 5.6.0-5.6.35, 5.7.0-5.7.17 - Authenticated Denial of Service in Server Optimizer
Apr 24, 2017
CVSS 6.5
EPSS 0.03
CVE-2017-3309 HIGH
MySQL Server <= 5.5.54, <= 5.6.35, <= 5.7.17 - Authenticated Denial of Service in Server Optimizer
Apr 24, 2017
CVSS 7.7
EPSS 0.03
CVE-2017-3308 HIGH
MySQL Server <= 5.5.54, <= 5.6.35, <= 5.7.17 - Authenticated Denial of Service via DML Subcomponent
Apr 24, 2017
CVSS 7.7
EPSS 0.03
CVE-2017-5645 CRITICAL NUCLEI
Apache Log4j 2.0-2.8.1 - Remote Code Execution via Untrusted Data Deserialization
Apr 17, 2017
CVSS 9.8
EPSS 0.89
CVE-2017-5973 MEDIUM
QEMU < 2.8.1.1 - Denial of Service via Control Transfer Descriptor Sequence
Mar 27, 2017
CVSS 5.5
EPSS 0.00
CVE-2017-5929 CRITICAL
Logback < 1.2.0 - Deserialization of Untrusted Data in SocketServer and ServerSocketReceiver
Mar 13, 2017
CVSS 9.8
EPSS 0.08
CVE-2017-6011 MEDIUM
icoutils 0.31.1 - Out-of-bounds Read in simple_vec Function
Feb 16, 2017
CVSS 5.5
EPSS 0.02
CVE-2017-6010 MEDIUM
icoutils 0.31.1 - Buffer Overflow in extract_icons Function
Feb 16, 2017
CVSS 5.5
EPSS 0.02
CVE-2017-6009 MEDIUM
icoutils 0.31.1 - Buffer Overflow in decode_ne_resource_id Function
Feb 16, 2017
CVSS 5.5
EPSS 0.02
CVE-2017-3302 HIGH
Oracle MySQL < 5.6.21 and 5.7.x < 5.7.5 - Use-After-Free in libmysqlclient.so
Feb 12, 2017
CVSS 7.5
EPSS 0.05
CVE-2017-5848 HIGH
GStreamer < 1.11.2 - Denial of Service via PSM Parsing in gst_ps_demux_parse_psm
Feb 09, 2017
CVSS 7.5
EPSS 0.04
CVE-2017-5205 CRITICAL
tcpdump < 4.9.0 - Buffer Overflow in ISAKMP Parser
Jan 28, 2017
CVSS 9.8
EPSS 0.04
CVE-2017-5204 CRITICAL
tcpdump < 4.9.0 - Buffer Overflow in IPv6 Parser
Jan 28, 2017
CVSS 9.8
EPSS 0.06
CVE-2017-5203 CRITICAL
tcpdump < 4.9.0 - Buffer Overflow in BOOTP Parser
Jan 28, 2017
CVSS 9.8
EPSS 0.04
Products
enterprise_linux_desktop 1,928 enterprise_linux_server 1,891 enterprise_linux 1,857 enterprise_linux_workstation 1,845 enterprise_linux_server_aus 1,059 enterprise_linux_eus 784 enterprise_linux_server_tus 768 enterprise_linux_server_eus 622 openshift_container_platform 313 jboss_enterprise_application_platform 242 satellite 232 linux 229 openstack 210 enterprise_linux_hpc_node 146 openshift 146 software_collections 137 virtualization 128 enterprise_linux_for_ibm_z_systems 113 enterprise_linux_for_power_little_endian 107 single_sign-on 107 keycloak 98 enterprise_linux_for_power_little_endian_eus 94 enterprise_linux_for_ibm_z_systems_eus 88 enterprise_linux_workstation_supplementary 86 enterprise_linux_desktop_supplementary 84 enterprise_linux_server_supplementary 84 virtualization_host 84 enterprise_linux_server_supplementary_eus 83 enterprise_linux_hpc_node_eus 81 fedora_core 77
Quick Filters
Critical CVEs With Exploits In CISA KEV