Enterprise Linux Server Tus

Vendor:

First CVE: Dec 11, 2013 · Active for 12 years

770
Total CVEs
More Total CVEs than 100% of tracked products
55.0
Avg CVEs / Year
Higher CVE frequency than 99% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 36% of tracked products
2.7%
KEV Rate
Higher KEV Rate than 96% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Enterprise Linux Server Tus over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 11, 2013
12 years ago
Most Recent CVE
Mar 31, 2026
118 days ago

CVE Severity & Scoring

Enterprise Linux Server Tus770 CVEs
All CVEs352,785 CVEs
LowMediumHighCritical
Attack Vector
Local192 (24.9%)
Network488 (63.4%)
Unknown76 (9.9%)
Physical3 (0.4%)
Adjacent Network11 (1.4%)
Attack Complexity
Low558 (72.5%)
High136 (17.7%)
Unknown76 (9.9%)
User Interaction
None526 (68.3%)
Unknown76 (9.9%)
Required168 (21.8%)
Privileges Required
Low175 (22.7%)
High96 (12.5%)
None423 (54.9%)
Unknown76 (9.9%)

Top CVEs

Signals from CVEs in this product scope (770 CVEs).

770 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation
Oct 4, 20178.199YESYES
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a cra
Sep 24, 20149.899YESYES
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive inform
Apr 7, 20147.599YESYES
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to us
Oct 3, 20237.898YESYES
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ker
Mar 10, 20227.898YESYES
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri
Jan 28, 20227.898YESYES
In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buff
Oct 28, 20199.898YESYES
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upl
Sep 19, 20178.198YESYES
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps doc
Apr 27, 20177.898YESYES
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to wri
Sep 25, 20149.898YESYES

Exploit Exposure

Signals from CVEs in this product scope (770 CVEs).

CISA KEV
21 CVEs
2.7% of CVEs· 96th percentile
Metasploit
18 CVEs
2.3% of CVEs· 96th percentile
Nuclei
10 CVEs
1.3% of CVEs· 96th percentile
ExploitDB
50 CVEs
6.5% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (770 CVEs).

Media Mentions

Signals from CVEs in this product scope (770 CVEs).

Top CNAs Publishing CVEs For Enterprise Linux Server Tus

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
9.236.833.8%00
8.8257.315.9%33
8.61555.97.1%56
8.41886.38.6%611
8.21896.38.4%612
7.72576.411.3%1419
7.64646.89.5%1337
7.41097.212.8%213
7.31986.412.2%818
7.2656.917.6%39
6.6337.313.0%25
6.5617.413.3%37