← Back

Enterprise Linux For Power Little Endian

enterprise_linux_for_power_little_endian

Vendor: Redhat • 111 CVEs

CVEs (111)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Advancemame
DebianFedoraproject+1 more
6Advancecomp
Debian LinuxEnterprise Linux For Power Little Endian+3 more
Jun 17, 2026
Feb 17, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attack...Show more
An issue was discovered in AdvanceCOMP through 2.1. A NULL pointer dereference exists in the function be_uint32_read() located in endianrw.h. It can be triggered by sending a crafted file to a binary. It allows an attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact when a victim opens a specially crafted file.Show less
10Canonical
DebianHp+7 more
32Active Iq Unified Manager
Cloud BackupDebian Linux+29 more
Jun 17, 2026
Feb 4, 2019
N/A· v4
5.3 MEDIUM· v3
2.6 LOW· v2
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
3Debian
RedhatRsyslog
12Debian Linux
Enterprise Linux DesktopEnterprise Linux For Ibm Z Systems+9 more
Nov 21, 2024
Jan 25, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnera...Show more
A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable.Show less
5Canonical
DebianNetapp+2 more
21Active Iq Performance Analytics Services
Debian LinuxElement Software+18 more
Nov 21, 2024
Jan 11, 2019
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 a...Show more
An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.Show less
6Apache
CanonicalDebian+3 more
59Active Iq Unified Manager
Agile PlmAgile Product Lifecycle Management+56 more
Aug 25, 2026
Oct 4, 2017
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to fal...Show more
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.Show less
3Apache
NetappRedhat
227 Mode Transition Tool
Enterprise Linux DesktopEnterprise Linux Eus+19 more
Aug 6, 2026
Sep 19, 2017
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a speci...Show more
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.Show less
6Canonical
DebianMozilla+3 more
21Debian Linux
Enterprise Linux DesktopEnterprise Linux For Ibm Z Systems+18 more
May 6, 2026
Jun 13, 2016
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or...Show more
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.Show less
6Canonical
ImagemagickOpensuse+3 more
30Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux For Ibm Z Systems+27 more
Apr 22, 2026
May 5, 2016
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
6Canonical
ImagemagickOpensuse+3 more
30Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux For Ibm Z Systems+27 more
Apr 22, 2026
May 5, 2016
N/A· v4
5.5 MEDIUM· v3
5.8 MEDIUM· v2
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
4Opensuse
OracleRedhat+1 more
21Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Eus Compute Node+18 more
Apr 22, 2026
Oct 22, 2015
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
6Canonical
DebianOpensuse+3 more
21Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+18 more
Apr 21, 2026
Jul 16, 2015
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries...Show more
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.Show less