Skip to contentRedhat Desktop vulnerabilities
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16067Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16066Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0...CVE-2018-16065Fix available8.8 High
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +6 more +8 moreA vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16....CVE-2018-14624Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...CVE-2018-12383Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...CVE-2018-12378Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...CVE-2018-12377Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...CVE-2018-12376Fix available9.8 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16542Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16541Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...CVE-2018-16540Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16539Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be...CVE-2018-16511Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege"...CVE-2018-16509Public exploitFix availableEPSS 92.3%7.8 High
- gluster glusterfs, debian linux, opensuse leap +5 more +7 moreA flaw was found in the way dic_unserialize function of glusterfs does not handle negative key...CVE-2018-10911Fix available6.5 Medium
- canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 moreLittle CMS (aka Little Color Management System) 2.9 has an integer overflow in the...CVE-2018-16435Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...CVE-2018-16402Fix available9.8 Critical
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...CVE-2018-14622Fix available5.3 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...CVE-2018-15911Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-15910Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...CVE-2018-15909Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...CVE-2018-15908Fix available7.8 High
- apache mod perl, canonical ubuntu linux, debian linux +4 more +6 moremod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a...CVE-2011-2767Fix available9.8 Critical
- x.org libx11, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is...CVE-2018-14599Fix available9.8 Critical
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreA cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM...CVE-2018-10846Fix available5.3 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen...CVE-2018-10845Fix available5.9 Medium
- [unknown] gnutls, canonical ubuntu linux, debian linux +4 more +6 moreIt was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen...CVE-2018-10844Fix available5.9 Medium
- linux kernel, canonical ubuntu linux, debian linux +3 more +5 moreIt was found that the raw midi kernel driver does not protect against concurrent access which...CVE-2018-10902Fix available7.8 High
- ibm sdk, sdk, java technology edition, oracle enterprise manager base platform +4 more +6 moreThe IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java...CVE-2018-16567.4 High
- ibm sdk, java technology edition, software development kit, redhat enterprise linux desktop +3 more +5 moreA flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow...CVE-2018-15175.9 Medium
- libvirt, redhat enterprise linux, enterprise linux desktop +7 more +9 morelibvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block...CVE-2015-5160Fix available5.5 Medium
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability"...CVE-2018-12828Fix available9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...CVE-2018-12827Public exploitFix availableEPSS 31.7%7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...CVE-2018-12826Fix available7.5 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful...CVE-2018-12825Fix available9.8 Critical
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful...CVE-2018-12824Fix availableEPSS 10.7%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- spice project spice, [unknown] spice:, canonical ubuntu linux +9 more +11 moreA vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for...CVE-2018-10873Fix available8.3 High
- samba, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 moreA flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1...CVE-2018-1139Fix available5.4 Medium
- samba, canonical ubuntu linux, debian linux +5 more +7 moreA heap-buffer overflow was found in the way samba clients processed extra long filename in a...CVE-2018-10858Fix available4.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +48 more +50 moreThe Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsCVE-2018-5391Public exploitFix availableEPSS 32.1%7.5 High
- isc bind, bind 9, canonical ubuntu linux +9 more +11 moreA flaw in the "deny-answer-aliases" feature can cause an assertion failure in namedCVE-2018-5740Public exploitFix availableEPSS 60.2%7.5 High
- postgresql, canonical ubuntu linux, debian linux +6 more +8 moreA vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to...CVE-2018-10915Fix available8.5 High
- debian linux, linux kernel, a10networks advanced core operating system +35 more +37 moreLinux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of serviceCVE-2018-5390Fix availableEPSS 71.8%7.5 High
- rpm yum-utils, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreA directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to...CVE-2018-10897Fix available8.8 High
- x libxcursor, canonical ubuntu linux, debian linux +4 more +6 more_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause...CVE-2015-9262Fix available9.8 Critical
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one...CVE-2018-14682Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in kwajd_read_headers in mspack/kwajd.c in libmspack before 0.7alpha. Bad...CVE-2018-14681Fix available8.8 High
- cabextract libmspack, cabextract project cabextract, canonical ubuntu linux +5 more +7 moreAn issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank...CVE-2018-14680Fix available6.5 Medium
- Show moreLoading…