Skip to contentRedhat Linux Server vulnerabilities
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...CVE-2018-1000301Fix available9.1 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player versions 29.0.0.140 and earlier have an exploitable type confusion...CVE-2018-4944Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to...CVE-2018-10998Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMozilla developers backported selected changes in the Skia library. These changes correct memory...CVE-2018-5183Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...CVE-2018-5178Fix available8.1 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreSites can bypass security checks on permissions to install lightweight themes by manipulating the...CVE-2018-5168Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...CVE-2018-5159Public exploitFix availableEPSS 20.6%9.8 Critical
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreMalicious PDF can inject JavaScript into PDF ViewerCVE-2018-5158Public exploitFix availableEPSS 10.3%8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...CVE-2018-5157Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...CVE-2018-5155Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...CVE-2018-5154Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...CVE-2018-5150Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreLinux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...CVE-2018-1130Fix available5.5 Medium
- debian linux, kernel vhost, linux kernel +5 more +7 moreLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed...CVE-2018-1118Fix available2.3 Low
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...CVE-2018-1089Fix available7.5 High
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...CVE-2018-1087Fix available8.0 High
- gnome libgxps, redhat ansible tower, enterprise linux desktop +2 more +4 moreThere is a stack-based buffer over-read in calling GLib in the function...CVE-2018-10767Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- gnu wget, canonical ubuntu linux, debian linux +3 more +5 moreGNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in...CVE-2018-0494Public exploitFix availableEPSS 16.5%6.5 Medium
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...CVE-2018-10675Fix available7.8 High
- apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 moreAn information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice...CVE-2018-10583Public exploitFix availableEPSS 79.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel version 3.18 contains a dangerous feature vulnerability in...CVE-2018-1000199Public exploitFix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd)...CVE-2018-10535Fix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor...CVE-2018-10534Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreConfusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6117Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6116Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117...CVE-2018-6114Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreImproper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66...CVE-2018-6113Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...CVE-2018-6112Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0...CVE-2018-6111Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6110Fix available5.4 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 morereadAsText() can indefinitely read the file picked by the user, rather than only once at the time...CVE-2018-6109Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6108Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6107Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...CVE-2018-6106Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117...CVE-2018-6105Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6104Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6103Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...CVE-2018-6102Fix available4.3 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6101Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...CVE-2018-6100Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6099Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6098Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...CVE-2018-6097Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...CVE-2018-6096Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreInappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0...CVE-2018-6095Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreInline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6094Fix available8.8 High
- Show moreLoading…