Product:

Enterprise_linux

(Redhat)
Repositories • https://github.com/torvalds/linux
• https://github.com/Perl/perl5
• https://github.com/ceph/ceph
• https://github.com/ClusterLabs/pcs
• https://github.com/mjg59/linux
#Vulnerabilities 1618
Date Id Summary Products Score Patch Annotated
2019-11-22 CVE-2015-7810 libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files Debian_linux, Fedora, Enterprise_linux, Libbluray N/A
2019-11-14 CVE-2012-1168 Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified. Fedora, Moodle, Enterprise_linux N/A
2019-11-14 CVE-2012-1156 Moodle before 2.2.2 has users' private files included in course backups Fedora, Moodle, Enterprise_linux N/A
2019-11-14 CVE-2012-1155 Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to Debian_linux, Fedora, Moodle, Enterprise_linux N/A
2019-11-19 CVE-2011-4967 tog-Pegasus has a package hash collision DoS vulnerability Tog\-Pegasus, Enterprise_linux N/A
2019-11-20 CVE-2012-6136 tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes. Debian_linux, Fedora, Enterprise_linux, Enterprise_linux_desktop, Enterprise_linux_server, Enterprise_linux_workstation, Tuned N/A
2019-11-20 CVE-2013-1817 MediaWiki before 1.19.4 and 1.20.x before 1.20.3 contains an error in the api.php script which allows remote attackers to obtain sensitive information. Debian_linux, Fedora, Mediawiki, Enterprise_linux N/A
2019-11-20 CVE-2013-1816 MediaWiki before 1.19.4 and 1.20.x before 1.20.3 allows remote attackers to cause a denial of service (application crash) by sending a specially crafted request. Debian_linux, Fedora, Mediawiki, Enterprise_linux N/A
2019-11-14 CVE-2011-1145 The SQLDriverConnect() function in unixODBC before 2.2.14p2 have a possible buffer overflow condition when specifying a large value for SAVEFILE parameter in the connection string. Debian_linux, Opensuse, Enterprise_linux, Unixodbc N/A
2019-11-13 CVE-2010-4657 PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output. Debian_linux, Php, Enterprise_linux N/A