Skip to contentRedhat Enterprise Linux Server vulnerabilities
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117...CVE-2018-6151Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker...CVE-2018-174618.8 High
- freedesktop poppler, canonical ubuntu linux, debian linux +5 more +7 morePoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...CVE-2018-13988Fix available6.5 Medium
- [unknown] fuse, debian linux, redhat enterprise linux desktop +2 more +4 moreIn fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction...CVE-2018-10906Public exploitFix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoderCVE-2018-1336Fix availableEPSS 20.4%7.5 High
- oracle corporation java, hp xp7 command view, netapp active iq unified manager +18 more +20 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE)....CVE-2018-2973Fix available5.9 Medium
- oracle corporation java, hp xp7 command view, netapp active iq unified manager +18 more +20 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2018-2940Fix available4.3 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options)....CVE-2018-3066Fix available3.3 Low
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported...CVE-2018-3058Fix available4.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +24 more +26 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2952Fix available3.7 Low
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not...CVE-2018-14362Fix available9.8 Critical
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote...CVE-2018-14357Fix available9.8 Critical
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote...CVE-2018-14354Fix available9.8 Critical
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds...CVE-2018-10883Fix available4.8 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +5 more +7 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound...CVE-2018-10881Fix available4.2 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free...CVE-2018-10879Fix available4.2 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +3 more +5 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds...CVE-2018-10878Fix available4.8 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability....CVE-2018-50087.5 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability....CVE-2018-5007EPSS 17.8%8.8 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 more +4 moreA flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch...CVE-2018-108726.5 Medium
- arm cortex-a, cortex-r, fujitsu m12-1 firmware +223 more +225 moreSystems with microprocessors utilizing speculative execution and branch prediction may allow...CVE-2018-3693Fix available5.6 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreA flaw was found in the way signature calculation was handled by cephx authentication protocol....CVE-2018-1129Fix available6.5 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreIt was found that cephx authentication protocol did not verify ceph clients correctly and was...CVE-2018-1128Fix available7.5 High
- ceph, redhat ceph storage, debian linux +6 more +8 moreA flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...CVE-2018-10861Fix available8.1 High
- libpng, canonical ubuntu linux, oracle jdk +4 more +6 moreIn libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function ...CVE-2018-13785Fix available6.5 Medium
- [unknown] docker, mobyproject moby, opensuse leap +3 more +5 moreThe default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does...CVE-2018-10892Fix available6.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreThe inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users...CVE-2018-13405Public exploitFix available7.8 High
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 morePlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...CVE-2018-12374Fix available4.3 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moredDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...CVE-2018-12373Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moreDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...CVE-2018-12372Fix available6.5 Medium
- [unknown] setup, redhat enterprise linux desktop, enterprise linux server +1 more +3 moresetup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and...CVE-2018-1113Fix available4.8 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,...CVE-2018-13033Fix available5.5 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreVulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-3081Fix available5.0 Medium
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- [unknown] sssd, debian linux, redhat enterprise linux desktop +2 more +4 moreThe UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too...CVE-2018-10852Fix available3.8 Low
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow...CVE-2018-5002In KEVFix availableEPSS 24.4%7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability....CVE-2018-5001Fix availableEPSS 13.1%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability....CVE-2018-5000Fix availableEPSS 13.7%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability....CVE-2018-4945Fix available8.8 High
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +7 more +9 more389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds...CVE-2018-10850Fix available5.9 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- Show moreLoading…