Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

enterprise linux high availability vulnerabilities and exploits

(subscribe to this query)
6.6
CVSSv2
CVE-2010-2537
The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel prior to 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
Linux Linux KernelCanonical Ubuntu Linux 10.10Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Suse Suse Linux Enterprise Server 11Suse Suse Linux Enterprise Desktop 11Suse Linux Enterprise High Availability Extension 11
1.9
CVSSv2
CVE-2010-2803
The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel prior to 2.6.27.53, 2.6.32.x prior to 2.6.32.21, 2.6.34.x prior to 2.6.34.6, and 2.6.35.x prior to 2.6.35.4 allows local users to obtain potentially sensitive i...
Linux Linux KernelDebian Debian Linux 5.0Suse Linux Enterprise Desktop 11Opensuse Opensuse 11.1Suse Linux Enterprise Server 11Opensuse Opensuse 11.3Suse Linux Enterprise High Availability Extension 11Suse Linux Enterprise Real Time 11
7.2
CVSSv2
CVE-2010-2959
Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel prior to 2.6.27.53, 2.6.32.x prior to 2.6.32.21, 2.6.34.x prior to 2.6.34.6, and 2.6.35.x prior to 2.6.35.4 allows malicious users to execute arbitrary code or cause a denial...
Linux Linux KernelFedoraproject Fedora 12Debian Debian Linux 5.0Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Opensuse Opensuse 11.3Suse Linux Enterprise High Availability Extension 11Suse Linux Enterprise Real Time 11
7.5
CVSSv2
CVE-2014-2323
SQL injection vulnerability in mod_mysql_vhost.c in lighttpd prior to 1.4.35 allows remote malicious users to execute arbitrary SQL commands via the host name, related to request_check_hostname.
Lighttpd LighttpdDebian Debian Linux 6.0Debian Debian Linux 7.0Debian Debian Linux 8.0Opensuse Opensuse 11.4Opensuse Opensuse 12.3Opensuse Opensuse 13.1Suse Linux Enterprise High Availability Extension 11Suse Linux Enterprise Software Development Kit 11
10
CVSSv2
CVE-2010-2495
The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel prior to 2.6.34 does not properly validate certain values associated with an interface, which allows malicious users to cause a denial of service (NULL pointer dereference and OOPS...
Linux Linux KernelCanonical Ubuntu Linux 10.10Canonical Ubuntu Linux 6.06Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 9.10Suse Suse Linux Enterprise Server 11Suse Suse Linux Enterprise Desktop 11Suse Suse Linux Enterprise High Availability Extension 11
5
CVSSv2
CVE-2014-2324
Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd prior to 1.4.35 allow remote malicious users to read arbitrary files via a .. (dot dot) in the host name, related to request_check_hostname.
Lighttpd LighttpdDebian Debian Linux 6.0Debian Debian Linux 7.0Debian Debian Linux 8.0Opensuse Opensuse 11.4Opensuse Opensuse 12.3Opensuse Opensuse 13.1Suse Linux Enterprise High Availability Extension 11Suse Linux Enterprise Software Development Kit 11Contec Sv-cpt-mc310 Firmware
2.1
CVSSv2
CVE-2010-2066
The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel prior to 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.
Linux Linux KernelVmware Esx 4.1Vmware Esx 4.0Canonical Ubuntu Linux 10.10Canonical Ubuntu Linux 9.04Canonical Ubuntu Linux 9.10Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 8.04Canonical Ubuntu Linux 6.06Suse Suse Linux Enterprise Server 11Suse Suse Linux Enterprise Desktop 11Suse Linux Enterprise High Availability Extension 11
4
CVSSv2
CVE-2019-2681
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...
Oracle MysqlRedhat Software Collections 1.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6
4
CVSSv2
CVE-2019-2686
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...
Oracle MysqlRedhat Software Collections 1.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6
4
CVSSv2
CVE-2019-2624
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. S...
Oracle MysqlRedhat Software Collections 1.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux Server Aus 8.4Redhat Enterprise Linux Server Aus 8.6Redhat Enterprise Linux Server Tus 8.6Redhat Enterprise Linux Eus 8.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook