Skip to contentCanonical vulnerabilities
Newest
- mozilla firefox, canonical ubuntu linux +1 moreA use-after-free vulnerability can occur during WebGL operations. While this results in a...CVE-2018-5180Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreA vulnerability exists in XSLT during number formatting where a negative buffer size may be...CVE-2018-5177Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreThe JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including ...CVE-2018-5176Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreA mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src"...CVE-2018-5175Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe filename appearing in the "Downloads" panel improperly renders some Unicode characters,...CVE-2018-5173Fix available5.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe Live Bookmarks page and the PDF viewer can run injected script content if a user pastes...CVE-2018-5172Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the ...CVE-2018-5169Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both...CVE-2018-5167Fix available4.3 Medium
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions can use request redirection and a "filterReponseData" filter to bypass host...CVE-2018-5166Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreContent Security Policy (CSP) is not applied correctly to all parts of multipart content sent...CVE-2018-5164Fix available6.1 Medium
- mozilla firefox, canonical ubuntu linux +1 moreIf a malicious attacker has used another vulnerability to gain full control over a content...CVE-2018-5163Fix available8.1 High
- mozilla firefox, canonical ubuntu linux +1 moreWebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while...CVE-2018-5160Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreIf websocket data is sent with mixed text and binary in a single message, the binary data can be...CVE-2018-5153Fix available7.5 High
- mozilla firefox, canonical ubuntu linux +1 moreWebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such...CVE-2018-5152Fix available6.5 Medium
- mozilla firefox, canonical ubuntu linux +1 moreMemory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory...CVE-2018-5151Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMozilla developers backported selected changes in the Skia library. These changes correct memory...CVE-2018-5183Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...CVE-2018-5178Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreSites can bypass security checks on permissions to install lightweight themes by manipulating the...CVE-2018-5168Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...CVE-2018-5159Public exploitFix availableEPSS 20.6%9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreMalicious PDF can inject JavaScript into PDF ViewerCVE-2018-5158Public exploitFix availableEPSS 10.3%8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...CVE-2018-5157Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...CVE-2018-5155Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...CVE-2018-5154Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...CVE-2018-5150Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreLinux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...CVE-2018-1130Fix available5.5 Medium
- debian linux, kernel vhost, linux kernel +5 more +7 moreLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed...CVE-2018-1118Fix available2.3 Low
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- freedesktop xdg-utils, canonical ubuntu linux, debian linux +2 moreThe open_envvar function in xdg-open in xdg-utils before 1.1.3 does not validate strings before...CVE-2017-18266Fix available8.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreThe TIFFWriteDirectorySec() function in tif_dirwrite.c in LibTIFF through 4.0.9 allows remote...CVE-2018-10963Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreIn types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory...CVE-2018-10958Fix available6.5 Medium
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...CVE-2018-1087Fix available8.0 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.CVE-2018-10805Fix available6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c.CVE-2018-10804Fix available6.5 Medium
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before...CVE-2018-4200Public exploitFix availableEPSS 10.0%8.8 High
- libtiff, canonical ubuntu linux +1 moreTIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as...CVE-2018-10779Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- gnu wget, canonical ubuntu linux, debian linux +3 more +5 moreGNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in...CVE-2018-0494Public exploitFix availableEPSS 16.5%6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...CVE-2018-10675Fix available7.8 High
- apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 moreAn information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice...CVE-2018-10583Public exploitFix availableEPSS 79.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel version 3.18 contains a dangerous feature vulnerability in...CVE-2018-1000199Public exploitFix available5.5 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10549Fix available8.8 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10548Fix available7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in ext/phar/phar_object.c in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1...CVE-2018-10547Fix available6.1 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x...CVE-2018-10546Public exploitFix available7.5 High
- php, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in PHP before 5.6.35, 7.0.x before 7.0.29, 7.1.x before 7.1.16, and 7.2.x...CVE-2018-10545Fix available4.7 Medium
- libraw, canonical ubuntu linux +1 moreAn issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F...CVE-2018-10529Fix available8.8 High
- libraw, canonical ubuntu linux +1 moreAn issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char...CVE-2018-10528Fix available8.8 High
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...CVE-2018-1059Fix available6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4...CVE-2018-10323Fix available5.5 Medium
- Show moreLoading…