Skip to contentRedhat Enterprise Linux vulnerabilities
- haproxy, canonical ubuntu linux, opensuse leap +2 more +4 moreAn out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1...CVE-2018-20615Fix available7.5 High
- gnu binutils, canonical ubuntu linux, redhat enterprise linux desktop +2 more +4 morebinutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump,...CVE-2018-1000876Fix available7.8 High
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0...CVE-2018-1000878Fix available8.8 High
- libarchive, canonical ubuntu linux, debian linux +4 more +6 morelibarchive version commit 416694915449219d505531b1096384f3237dd6cc onwards (release v3.1.0...CVE-2018-1000877Fix available8.8 High
- kaspersky libvnc, canonical ubuntu linux, debian linux +7 more +9 moreLibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write...CVE-2018-15127Fix availableEPSS 15.1%9.8 Critical
- debian linux, linux kernel, [unknown] kernel: +3 more +5 moreA flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different...CVE-2018-16884Fix available6.5 Medium
- grafana, netapp active iq performance analytics services, storagegrid webscale nas bridge +4 more +6 moreGrafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary...CVE-2018-19039Fix available6.5 Medium
- exiv2, debian linux, fedoraproject fedora +3 more +5 moreThere is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in...CVE-2018-20097Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for...CVE-2018-18397Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA potential vulnerability leading to an integer overflow can occur during buffer size...CVE-2018-18498Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA same-origin policy violation allowing the theft of cross-origin URL entries when using the...CVE-2018-18494Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur in the Skia library during buffer offset calculations with hardware...CVE-2018-18493Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur after deleting a selection element due to a weak...CVE-2018-18492Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMozilla developers and community members reported memory safety bugs present in Firefox 63 and...CVE-2018-12405Fix available9.8 Critical
- libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn error within the "leaf_hdr_load_raw()" function (internal/dcraw_common.cpp) in LibRaw versions...CVE-2018-5806Fix available6.5 Medium
- libraw, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA boundary error within the "quicktake_100_load_raw()" function (internal/dcraw_common.cpp) in...CVE-2018-5805Fix available8.8 High
- adobe flash player, flash player installer, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free...CVE-2018-15982In KEVPublic exploitFix availableEPSS 89.6%7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18358Fix available5.7 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578...CVE-2018-18357Fix available4.3 Medium
- google chrome, canonical ubuntu linux, debian linux +7 more +9 moreAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...CVE-2018-18356Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578...CVE-2018-18355Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validate of external protocols in Shell Integration in Google Chrome on Windows...CVE-2018-18354Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreFailure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on...CVE-2018-18353Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService works could inappropriately gain access to cross origin audio in Media in Google Chrome...CVE-2018-18352Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of proper validation of ancestor frames site when sending lax cookies in Navigation in...CVE-2018-18351Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0...CVE-2018-18350Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreRemote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome...CVE-2018-18349Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome...CVE-2018-18348Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18345Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in...CVE-2018-18344Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreExecution of user supplied Javascript during object deserialization can update object length...CVE-2018-18342Fix available8.8 High
- google chrome, debian linux, opensuse leap +3 more +5 moreHeap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to...CVE-2018-18335Fix available8.8 High
- google chrome, debian linux, google chromium v8 +3 more +5 moreExecution of user supplied Javascript during array deserialization leading to an out of bounds...CVE-2018-17480In KEVFix availableEPSS 35.6%8.8 High
- google android, linux kernel, canonical ubuntu linux +6 more +8 moreIn sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This...CVE-2018-9568Fix available7.8 High
- artifex ghostscript, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreIt was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly...CVE-2018-16863Fix available7.3 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +6 more +8 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer...CVE-2018-8787Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +7 more +9 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based...CVE-2018-8786Fix available9.8 Critical
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid...CVE-2018-18314Fix available9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +6 more +8 morePerl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers...CVE-2018-18313Fix available9.1 Critical
- perl, canonical ubuntu linux, debian linux +5 more +7 morePerl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18312Fix availableEPSS 12.8%9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +15 more +17 morePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18311Fix availableEPSS 11.7%9.8 Critical
- node.js, redhat enterprise linux, enterprise linux desktop +5 more +7 moreNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...CVE-2018-12121Fix availableEPSS 10.2%7.5 High
- artifex ghostscript, debian linux, redhat enterprise linux desktop +4 more +6 moreIn Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain...CVE-2018-19134Fix available7.8 High
- linux kernel, [unknown] kernel:, redhat enterprise linux desktop +5 more +7 moreThe Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in...CVE-2018-14646Fix available5.5 Medium
- debian linux, linux kernel, [unknown] kernel: +2 more +4 moreA security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an...CVE-2018-16862Fix available5.3 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a...CVE-2018-19535Fix available6.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19477Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...CVE-2018-19476Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19475Fix available7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful...CVE-2018-15981Fix availableEPSS 11.7%9.8 Critical
- Show moreLoading…