CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,100 CVEs published, 232 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,100
Show in the list
Critical, last 7 days
232
Show in the list
Healthcare-tagged, last 7 days
10
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product redhat:enterprise_linux_for_power_big_endian. Show all products

15 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2024-1086
Known exploited
High 7.8Use-after-free in Linux kernel's netfilter: nf_tables component
Assigned by Google
Jan 31, 2024
CVE-2019-8720
Known exploited
High 8.8A vulnerability was found in WebKit.
Assigned by redhat
Mar 5, 2023
CVE-2021-4034
Known exploited
High 7.8A local privilege escalation vulnerability was found on polkit's pkexec utility.
Assigned by redhat
Jan 27, 2022
CVE-2021-40438
Known exploited
Critical 9.0mod_proxy SSRF
Assigned by apache
Sep 16, 2021
CVE-2019-5544
Known exploited
Critical 9.8OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue.
Assigned by vmware
Dec 6, 2019
CVE-2019-11043
Known exploited
High 8.7Underflow in PHP-FPM can lead to RCE
Assigned by php
Oct 28, 2019
CVE-2017-12617
Known exploited
High 8.1When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g.
Assigned by apache
Oct 3, 2017
CVE-2017-12615
Known exploited
High 8.1When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g.
Assigned by apache
Sep 19, 2017
CVE-2016-3718
Known exploited
Medium 5.5The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
Assigned by redhat
May 5, 2016
CVE-2016-3715
Known exploited
Medium 5.5The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
Assigned by redhat
May 5, 2016

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.