Skip to contentRedhat Enterprise Linux Server vulnerabilities
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreApache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax.CVE-2018-11781Fix available7.8 High
- apache spamassassin, canonical ubuntu linux, debian linux +4 more +6 moreA denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2....CVE-2017-15705Fix available5.3 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreArtifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be...CVE-2018-17183Fix available7.8 High
- fedora project 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux aus +5 more +7 moreA flaw was found in 389-ds-base before version 1.3.8.4-13. The process ns-slapd crashes in...CVE-2018-14638Fix available7.5 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability....CVE-2018-15967Fix available7.5 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege"...CVE-2018-16802Fix available7.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81...CVE-2018-16088Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81...CVE-2018-16084Fix available6.1 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0...CVE-2018-16083Public exploitFix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote...CVE-2018-16082Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAllowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69...CVE-2018-16081Fix available7.4 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA race condition between permission prompts and navigations in Prompts in Google Chrome prior to...CVE-2018-16079Fix available5.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreUnsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed...CVE-2018-16078Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreMissing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker...CVE-2018-16076Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16071Public exploitFix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMissing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16068Fix available9.6 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16067Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to...CVE-2018-16066Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0...CVE-2018-16065Fix available8.8 High
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +6 more +8 moreA vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16....CVE-2018-14624Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreIf a user saved passwords before Firefox 58 and then later set a master password, an unencrypted...CVE-2018-12383Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by...CVE-2018-12378Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when refresh driver timers are refreshed in some...CVE-2018-12377Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence...CVE-2018-12376Fix available9.8 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16542Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16541Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the...CVE-2018-16540Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use...CVE-2018-16539Fix available5.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +6 more +8 moreAn issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be...CVE-2018-16511Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege"...CVE-2018-16509Public exploitFix availableEPSS 92.3%7.8 High
- gluster glusterfs, debian linux, opensuse leap +4 more +6 moreA flaw was found in RPC request using gfs3_rename_req in glusterfs server. An authenticated...CVE-2018-10930Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreA flaw was found in RPC request using gfs2_create_req in glusterfs server. An authenticated...CVE-2018-10929Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +4 more +6 moreA flaw was found in RPC request using gfs3_symlink_req in glusterfs server which allows symlink...CVE-2018-10928Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreA flaw was found in RPC request using gfs3_lookup_req in glusterfs server. An authenticated...CVE-2018-10927Fix available7.1 High
- gluster glusterfs, debian linux, opensuse leap +3 more +5 moreA flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An...CVE-2018-10926Fix available8.1 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that the "mknod" call derived from mknod(2) can create files pointing to devices on...CVE-2018-10923Fix available7.6 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that an attacker could issue a xattr request via glusterfs FUSE to cause gluster...CVE-2018-10914Fix available5.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreAn information disclosure vulnerability was discovered in glusterfs server. An attacker could...CVE-2018-10913Fix available3.5 Low
- gluster glusterfs, debian linux, opensuse leap +5 more +7 moreA flaw was found in the way dic_unserialize function of glusterfs does not handle negative key...CVE-2018-10911Fix available6.5 Medium
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server is vulnerable to multiple stack based buffer overflows due to...CVE-2018-10907Fix available8.8 High
- gluster glusterfs, debian linux, opensuse leap +2 more +4 moreIt was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats...CVE-2018-10904Fix available8.8 High
- canonical ubuntu linux, debian linux, littlecms little cms color engine +3 more +5 moreLittle CMS (aka Little Color Management System) 2.9 has an integer overflow in the...CVE-2018-16435Fix available5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 morelibelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double...CVE-2018-16402Fix available9.8 Critical
- [unknown] libtirpc, canonical ubuntu linux, debian linux +5 more +7 moreA null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The...CVE-2018-14622Fix available5.3 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +4 more +6 moredwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote...CVE-2018-16062Fix available5.5 Medium
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could...CVE-2018-15911Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +6 more +8 moreIn Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a...CVE-2018-15910Fix available7.8 High
- artifex ghostscript, gpl ghostscript, canonical ubuntu linux +8 more +10 moreIn Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could...CVE-2018-15909Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreIn Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript...CVE-2018-15908Fix available7.8 High
- apache mod perl, canonical ubuntu linux, debian linux +4 more +6 moremod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a...CVE-2011-2767Fix available9.8 Critical
- Show moreLoading…