Redhat

Enterprise Linux Workstation

1845 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.8

CVE-2020-2593

  • EPSS 0.59%
  • Published 15.01.2020 17:15:19
  • Last modified 21.11.2024 05:25:40

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows un...

6.5

CVE-2015-3147

  • EPSS 0.54%
  • Published 14.01.2020 18:15:10
  • Last modified 21.11.2024 02:28:46

daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/sp...

7.8

CVE-2014-7844

  • EPSS 0.91%
  • Published 14.01.2020 17:15:11
  • Last modified 21.11.2024 02:18:07

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

7.5

CVE-2020-6851

Exploit
  • EPSS 1.22%
  • Published 13.01.2020 06:15:10
  • Last modified 21.11.2024 05:36:17

OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.

8.8

CVE-2020-6377

Exploit
  • EPSS 2.9%
  • Published 10.01.2020 22:15:12
  • Last modified 21.11.2024 05:35:36

Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

6.1

CVE-2019-17016

  • EPSS 3.47%
  • Published 08.01.2020 22:15:12
  • Last modified 21.11.2024 04:31:32

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer incorrectly rewrites a @namespace rule. This could allow for injection into certain types of websites resulting in data exfiltration. This vulnerability af...

8.8

CVE-2019-17017

  • EPSS 2.63%
  • Published 08.01.2020 22:15:12
  • Last modified 21.11.2024 04:31:33

Due to a missing case handling object types, a type confusion vulnerability could occur, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.4 and Fire...

6.1

CVE-2019-17022

  • EPSS 4.63%
  • Published 08.01.2020 22:15:12
  • Last modified 21.11.2024 04:31:33

When pasting a <style> tag from the clipboard into a rich text editor, the CSS sanitizer does not escape < and > characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direc...

8.8

CVE-2019-17024

Exploit
  • EPSS 3.28%
  • Published 08.01.2020 22:15:12
  • Last modified 21.11.2024 04:31:34

Mozilla developers reported memory safety bugs present in Firefox 71 and Firefox ESR 68.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. T...

7.5

CVE-2019-19925

  • EPSS 9.23%
  • Published 24.12.2019 17:15:10
  • Last modified 21.11.2024 04:35:40

zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.