Skip to contentRedhat Desktop vulnerabilities
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 morePlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...CVE-2018-12374Fix available4.3 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moredDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...CVE-2018-12373Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moreDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...CVE-2018-12372Fix available6.5 Medium
- [unknown] setup, redhat enterprise linux desktop, enterprise linux server +1 more +3 moresetup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and...CVE-2018-1113Fix available4.8 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,...CVE-2018-13033Fix available5.5 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreVulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-3081Fix available5.0 Medium
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- [unknown] sssd, debian linux, redhat enterprise linux desktop +2 more +4 moreThe UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too...CVE-2018-10852Fix available3.8 Low
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow...CVE-2018-5002In KEVFix availableEPSS 24.4%7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability....CVE-2018-5001Fix availableEPSS 13.1%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability....CVE-2018-5000Fix availableEPSS 13.7%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability....CVE-2018-4945Fix available8.8 High
- intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 moreSystem software utilizing Lazy FP state restore technique on systems using Intel Core-based...CVE-2018-3665Fix available5.6 Medium
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +7 more +9 more389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds...CVE-2018-10850Fix available5.9 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- debian linux, google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +4 more +6 moreIn the function wmi_set_ie(), the length validation code does not handle unsigned integer...CVE-2018-5848Fix available7.8 High
- codehaus plexus-archiver, debian linux, redhat enterprise linux +2 more +4 moreImproper Limitation of a Pathname to a Restricted Directory in plexus-archiverCVE-2018-1002200Public exploitFix availableEPSS 11.6%5.5 Medium
- gnupg, canonical ubuntu linux, debian linux +6 more +8 moremainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...CVE-2018-12020Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62...CVE-2018-6147Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6144Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6143Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed...CVE-2018-6141Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAllowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to...CVE-2018-6140Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0...CVE-2018-6139Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreCSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak...CVE-2018-6137Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome...CVE-2018-6135Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396...CVE-2018-6133Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreEarly free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote...CVE-2018-6127Fix available9.6 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a...CVE-2018-6124Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6123Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0...CVE-2018-6084Public exploit7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6126Public exploitFix available8.8 High
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1061Fix available6.5 Medium
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1060Fix available4.3 Medium
- git-scm git, canonical ubuntu linux, debian linux +5 more +7 moreIn Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17...CVE-2018-11235Public exploitFix availableEPSS 47.4%7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium...CVE-2018-6120Fix available8.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-2767Fix available3.1 Low
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through by user submitting an embedded form. This...CVE-2018-5185Fix available6.5 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 moreUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...CVE-2018-5184Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....CVE-2018-5170Fix available4.3 Medium
- Show moreLoading…