Enterprise Linux Server Supplementary (Redhat) - vulnerabilities (CVEs)

84 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2017-05-23. Vendor: Redhat.

CVEs of Enterprise Linux Server Supplementary

CVE-2016-5178 - CVSS 9.8 (critical), 2017-05-23: Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact…
CVE-2016-5177 - CVSS 8.8 (high), 2017-05-23: Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have…
CVE-2016-1666 - CVSS 9.8 (critical), 2016-05-14: Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via…
CVE-2016-1665 - CVSS 6.5 (medium), 2016-05-14: The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators,…
CVE-2016-1664 - CVSS 4.3 (medium), 2016-05-14: The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction…
CVE-2016-1663 - CVSS 8.8 (high), 2016-05-14: The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in…
CVE-2016-1662 - CVSS 9.8 (critical), 2016-05-14: extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started,…
CVE-2016-1661 - CVSS 8 (high), 2016-05-14: Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin…
CVE-2016-1660 - CVSS 8.8 (high), 2016-05-14: Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows…
CVE-2015-8540 - CVSS 8.8 (high), 2016-04-14: Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and…
CVE-2016-2051 - CVSS 9.8 (critical), 2016-01-25: Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of…
CVE-2015-1289 - CVSS 7.5 (high), 2015-07-23: Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via…
CVE-2015-1288 - CVSS 6.8 (medium), 2015-07-23: The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows…
CVE-2015-1287 - CVSS 4.3 (medium), 2015-07-23: Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is…
CVE-2015-1286 - CVSS 4.3 (medium), 2015-07-23: Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google…
CVE-2015-1285 - CVSS 5 (medium), 2015-07-23: The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not…
CVE-2015-1284 - CVSS 7.5 (high), 2015-07-23: The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a…
CVE-2015-1282 - CVSS 6.8 (medium), 2015-07-23: Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers…
CVE-2015-1281 - CVSS 4.3 (medium), 2015-07-23: core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows…
CVE-2015-1280 - CVSS 7.5 (high), 2015-07-23: SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or…
CVE-2015-1279 - CVSS 7.5 (high), 2015-07-23: Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote…
CVE-2015-1278 - CVSS 4.3 (medium), 2015-07-23: content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon…
CVE-2015-1277 - CVSS 7.5 (high), 2015-07-23: Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or…
CVE-2015-1276 - CVSS 9.8 (critical), 2015-07-23: Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89…
CVE-2015-1274 - CVSS 6.8 (medium), 2015-07-23: Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to…
CVE-2015-1273 - CVSS 6.8 (medium), 2015-07-23: Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a…
CVE-2015-1272 - CVSS 7.5 (high), 2015-07-23: Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or…
CVE-2015-1271 - CVSS 6.8 (medium), 2015-07-23: PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a…
CVE-2015-1270 - CVSS 6.8 (medium), 2015-07-23: The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89,…
CVE-2015-1243 - CVSS 7.5 (high), 2015-05-01: Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in…
CVE-2015-1250 - CVSS 7.5 (high), 2015-05-01: Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via…
CVE-2015-3044 - CVSS 5 (medium), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to bypass…
CVE-2015-3042 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-3041 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-3040 - CVSS 5 (medium), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict…
CVE-2015-3039 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-3038 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0360 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0358 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-0354 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0355 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0353 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0352 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0351 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-0350 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0349 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-0348 - CVSS 10 (critical), 2015-04-14: Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows…
CVE-2015-0347 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0346 - CVSS 10 (critical), 2015-04-14: Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux…
CVE-2015-1230 - CVSS 7.5 (high), 2015-03-09: The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the…
CVE-2015-1220 - CVSS 6.8 (medium), 2015-03-09: Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome…
CVE-2015-1219 - CVSS 7.5 (high), 2015-03-09: Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows…
CVE-2015-1218 - CVSS 7.5 (high), 2015-03-09: Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a…
CVE-2015-1217 - CVSS 7.5 (high), 2015-03-09: The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome…
CVE-2015-1216 - CVSS 7.5 (high), 2015-03-09: Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as…
CVE-2015-1215 - CVSS 7.5 (high), 2015-03-09: The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have…
CVE-2015-1214 - CVSS 7.5 (high), 2015-03-09: Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before…
CVE-2014-7943 - CVSS 5 (medium), 2015-01-22: Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2014-7942 - CVSS 7.5 (high), 2015-01-22: The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial…
CVE-2014-7941 - CVSS 5 (medium), 2015-01-22: The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect…
CVE-2014-7939 - CVSS 4.3 (medium), 2015-01-22: Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted…
CVE-2014-7926 - CVSS 7.5 (high), 2015-01-22: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91,…
CVE-2014-7923 - CVSS 7.5 (high), 2015-01-22: The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91,…
CVE-2014-3566 - CVSS 3.4 (low), 2014-10-15: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle…
CVE-2014-3188 - CVSS 10 (critical), 2014-10-08: Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote…
CVE-2014-3191 - CVSS 7.5 (high), 2014-10-08: Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have…
CVE-2014-3194 - CVSS 7.5 (high), 2014-10-08: Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service or…
CVE-2014-3198 - CVSS 5 (medium), 2014-10-08: The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an…
CVE-2014-3190 - CVSS 7.5 (high), 2014-10-08: Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows…
CVE-2014-3193 - CVSS 7.5 (high), 2014-10-08: The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a…
CVE-2014-3197 - CVSS 5 (medium), 2014-10-08: The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not…
CVE-2014-3200 - CVSS 7.5 (high), 2014-10-08: Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via…
CVE-2014-3189 - CVSS 7.5 (high), 2014-10-08: The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data…
CVE-2014-3192 - CVSS 7.5 (high), 2014-10-08: Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink,…
CVE-2014-3195 - CVSS 5 (medium), 2014-10-08: Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory…
CVE-2014-3199 - CVSS 5 (medium), 2014-10-08: The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous…
CVE-2011-4111 - CVSS 6.8 (medium), 2014-02-26: Buffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in QEMU before 0.15.2 and 1.x before 1.0-rc4 allows remote…
CVE-2013-5870 - CVSS 6.8 (medium), 2014-01-15: Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2014-0418 - CVSS 5.1 (medium), 2014-01-15: Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors…
CVE-2014-0382 - CVSS 4.3 (medium), 2014-01-15: Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect availability via unknown vectors related to JavaFX.
CVE-2013-5895 - CVSS 5 (medium), 2014-01-15: Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.
CVE-2013-5906 - CVSS 5.1 (medium), 2014-01-15: Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVE-2013-5904 - CVSS 6.8 (medium), 2014-01-15: Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…
CVE-2013-2231 - CVSS 7.2 (high), 2013-10-01: Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6,…