InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,436
Show in the list
Critical, last 7 days
357
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product redhat:enterprise_linux_server. Show all products

98 CVEs, showing 1 to 50Page 1 of 2Next
CVESeverityTitlePublished
CVE-2025-6021High 7.5Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Assigned by redhat
Jun 12, 2025
CVE-2024-12085High 7.5Rsync: info leak via uninitialized stack contents
Assigned by redhat
Jan 14, 2025
CVE-2024-1086
Known exploited
High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Jan 31, 2024
CVE-2019-8720
Known exploited
High 8.8A vulnerability was found in WebKit.
Assigned by redhat
Mar 6, 2023
CVE-2021-4034
Known exploited
High 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility.
Assigned by redhat
Jan 28, 2022
CVE-2021-40438
Known exploited
Critical 9.0mod_proxy SSRF
Assigned by apache
Sep 16, 2021
CVE-2020-10531High 8.8An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1.
Assigned by mitre
Mar 12, 2020
CVE-2020-6418
Known exploited
High 8.8Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Assigned by Chrome
Feb 27, 2020
CVE-2019-19925High 7.5zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
Assigned by mitre
Dec 24, 2019
CVE-2019-19923High 7.5flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view.
Assigned by mitre
Dec 24, 2019
CVE-2019-19926High 7.5multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls.
Assigned by mitre
Dec 23, 2019
CVE-2019-8506
Known exploited
High 8.8A type confusion issue was addressed with improved memory handling.
Assigned by apple
Dec 18, 2019
CVE-2019-19880High 7.5exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
Assigned by mitre
Dec 18, 2019
CVE-2019-5544
Known exploited
Critical 9.8OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue.
Assigned by vmware
Dec 6, 2019
CVE-2019-11043
Known exploited
High 8.7Underflow in PHP-FPM can lead to RCE
Assigned by php
Oct 28, 2019
CVE-2019-10086
Healthcare
High 7.3In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Ja…
Assigned by apache
Aug 20, 2019
CVE-2019-10160Critical 9.8A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which s…
Assigned by redhat
Jun 7, 2019
CVE-2019-3856High 7.5An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed.
Assigned by redhat
Mar 25, 2019
CVE-2019-3857High 7.5An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are parsed.
Assigned by redhat
Mar 25, 2019
CVE-2019-3863High 7.5A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side.
Assigned by redhat
Mar 25, 2019
CVE-2019-9948Critical 9.1urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggerin…
Assigned by mitre
Mar 23, 2019
CVE-2019-3855High 7.5An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server.
Assigned by redhat
Mar 21, 2019
CVE-2019-9636Medium 5.3Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.
Assigned by mitre
Mar 8, 2019
CVE-2018-15982
Known exploited
High 7.8Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability.
Assigned by adobe
Jan 18, 2019
CVE-2018-17480
Known exploited
High 8.8Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code i…
Assigned by Chrome
Dec 11, 2018
CVE-2018-12121High 7.5Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized headers (almost 80 KB…
Assigned by nodejs
Nov 28, 2018
CVE-2018-5407Medium 4.7Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
Assigned by certcc
Nov 15, 2018
CVE-2018-6065
Known exploited
High 8.8Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit he…
Assigned by Chrome
Nov 14, 2018
CVE-2018-17463
Known exploited
High 8.8Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Assigned by Chrome
Nov 14, 2018
CVE-2018-11784Medium 4.3When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g.
Assigned by apache
Oct 4, 2018
CVE-2018-14634
Known exploited
High 7.8An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.
Assigned by redhat
Sep 25, 2018
CVE-2018-14647High 7.5Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.Sep 25, 2018
CVE-2017-15422Medium 6.5Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a…
Assigned by Chrome
Aug 28, 2018
CVE-2018-5002
Known exploited
High 7.8Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability.
Assigned by adobe
Jul 9, 2018
CVE-2018-1061Medium 6.5python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method.
Assigned by redhat
Jun 19, 2018
CVE-2018-1060Medium 4.3python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method.
Assigned by redhat
Jun 18, 2018
CVE-2018-0495Medium 4.7Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_…
Assigned by debian
Jun 13, 2018
CVE-2017-5436High 8.8An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font.Jun 11, 2018
CVE-2016-9079
Known exploited
High 7.5A use-after-free vulnerability in SVG Animation has been discovered.
Assigned by mozilla
Jun 11, 2018
CVE-2018-11212Medium 6.5An issue was discovered in libjpeg 9a and 9d.
Assigned by mitre
May 16, 2018
CVE-2018-2811High 7.7Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install).
Assigned by oracle
Apr 19, 2018
CVE-2018-4878
Known exploited
High 7.8A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161.
Assigned by adobe
Feb 6, 2018
CVE-2017-5070
Known exploited
High 8.8Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a craft…
Assigned by Chrome
Oct 27, 2017
CVE-2017-11292
Known exploited
High 8.8Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index.
Assigned by adobe
Oct 21, 2017
CVE-2017-12617
Known exploited
High 8.1When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g.
Assigned by apache
Oct 3, 2017
CVE-2017-12615
Known exploited
High 8.1When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g.
Assigned by apache
Sep 19, 2017
CVE-2016-6796High 7.5A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via…
Assigned by apache
Aug 11, 2017
CVE-2016-6797High 7.5The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not limit web application access to global J…
Assigned by apache
Aug 10, 2017
CVE-2016-6794Medium 5.3When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager.
Assigned by apache
Aug 10, 2017
CVE-2016-5018Critical 9.1In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application was able to bypass a configured SecurityManager via a Tomca…
Assigned by apache
Aug 10, 2017
Page 1 of 2Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.