Skip to contentRedhat Enterprise Linux vulnerabilities
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...CVE-2018-1089Fix available7.5 High
- haproxy, redhat enterprise linux +1 moreAn issue was discovered in HAProxy before 1.8.8. The incoming H2 frame length was checked against...CVE-2018-10184Fix available7.5 High
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...CVE-2018-1087Fix available8.0 High
- gnome libgxps, redhat ansible tower, enterprise linux desktop +2 more +4 moreThere is a stack-based buffer over-read in calling GLib in the function...CVE-2018-10767Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- gnu wget, canonical ubuntu linux, debian linux +3 more +5 moreGNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in...CVE-2018-0494Public exploitFix availableEPSS 16.5%6.5 Medium
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...CVE-2018-10675Fix available7.8 High
- apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 moreAn information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice...CVE-2018-10583Public exploitFix availableEPSS 79.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel version 3.18 contains a dangerous feature vulnerability in...CVE-2018-1000199Public exploitFix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd)...CVE-2018-10535Fix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor...CVE-2018-10534Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreConfusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6117Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117...CVE-2018-6114Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreImproper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66...CVE-2018-6113Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...CVE-2018-6112Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0...CVE-2018-6111Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6110Fix available5.4 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 morereadAsText() can indefinitely read the file picked by the user, rather than only once at the time...CVE-2018-6109Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...CVE-2018-6106Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...CVE-2018-6100Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...CVE-2018-6097Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...CVE-2018-6096Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6093Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...CVE-2018-6091Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...CVE-2018-6083Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...CVE-2018-6082Fix available4.7 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...CVE-2018-6080Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...CVE-2018-6079Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...CVE-2018-6078Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...CVE-2018-6077Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...CVE-2018-6070Fix available6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote...CVE-2018-6067Fix available8.8 High
- google chrome, debian linux, google chromium v8 +4 more +6 moreInteger overflow in computing the required allocation size when instantiating a new javascript...CVE-2018-6065In KEVPublic exploitFix availableEPSS 60.3%8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0...CVE-2018-6064Public exploitFix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146...CVE-2018-6063Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6062Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325...CVE-2018-6061Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6060Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote...CVE-2018-6057Fix available8.8 High
- xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 morebark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.CVE-2018-10393Fix available7.5 High
- xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 moremapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of...CVE-2018-10392Fix available8.8 High
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreconcat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...CVE-2018-10373Fix available6.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreprocess_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of...CVE-2018-10372Fix available5.5 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16...CVE-2018-10322Fix available5.5 Medium
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +7 more +9 moreThe DPDK vhost-user interface does not check to verify that all the requested guest physical...CVE-2018-1059Fix available6.1 Medium
- packagekit, canonical ubuntu linux, debian linux +6 more +8 moreAn authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users...CVE-2018-1106Fix available5.5 Medium
- check point software technologies ltd. linux kernel, debian linux, linux kernel +4 more +6 moreThe udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up...CVE-2018-8781Fix available7.8 High
- Show moreLoading…