Skip to contentRedhat Linux Server vulnerabilities
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- [unknown] sssd, debian linux, redhat enterprise linux desktop +2 more +4 moreThe UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too...CVE-2018-10852Fix available3.8 Low
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow...CVE-2018-5002In KEVFix availableEPSS 24.4%7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability....CVE-2018-5001Fix availableEPSS 13.1%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability....CVE-2018-5000Fix availableEPSS 13.7%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability....CVE-2018-4945Fix available8.8 High
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +7 more +9 more389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds...CVE-2018-10850Fix available5.9 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- debian linux, google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +4 more +6 moreIn the function wmi_set_ie(), the length validation code does not handle unsigned integer...CVE-2018-5848Fix available7.8 High
- gnupg, canonical ubuntu linux, debian linux +6 more +8 moremainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...CVE-2018-12020Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62...CVE-2018-6147Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6144Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6143Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed...CVE-2018-6141Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAllowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to...CVE-2018-6140Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0...CVE-2018-6139Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreCSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak...CVE-2018-6137Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome...CVE-2018-6135Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396...CVE-2018-6133Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreEarly free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote...CVE-2018-6127Fix available9.6 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a...CVE-2018-6124Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6123Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0...CVE-2018-6084Public exploit7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6126Public exploitFix available8.8 High
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1061Fix available6.5 Medium
- [unknown] python, canonical ubuntu linux, debian linux +5 more +7 morepython before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic...CVE-2018-1060Fix available4.3 Medium
- git-scm git, canonical ubuntu linux, debian linux +5 more +7 moreIn Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17...CVE-2018-11235Public exploitFix availableEPSS 47.4%7.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium...CVE-2018-6120Fix available8.8 High
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2018-2767Fix available3.1 Low
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through by user submitting an embedded form. This...CVE-2018-5185Fix available6.5 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 moreUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...CVE-2018-5184Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....CVE-2018-5170Fix available4.3 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 morePlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...CVE-2018-5162Fix available7.5 High
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +7 more +9 moreCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...CVE-2018-5161Fix available4.3 Medium
- debian linux, arm cortex-a, canonical ubuntu linux +280 more +282 morelinux-4.9 - security updateCVE-2018-3639Public exploitFix availableEPSS 60.4%5.5 Medium
- gnu glibc, canonical ubuntu linux, netapp data ontap edge +7 more +9 moreAn AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or...CVE-2018-11237Fix available7.8 High
- gnu glibc, netapp data ontap edge, element software management +6 more +8 morestdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing...CVE-2018-11236Fix available9.8 Critical
- procps-ng project procps-ng, [unknown] procps-ng, procps, canonical ubuntu linux +8 more +10 moreprocps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.*...CVE-2018-1126Fix available4.8 Medium
- [unknown] procps-ng, canonical ubuntu linux, debian linux +6 more +8 moreprocps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap...CVE-2018-1124Public exploitFix available7.3 High
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file...CVE-2018-1120Public exploitFix available2.8 Low
- fedora dhcp, fedoraproject fedora, redhat enterprise linux +5 more +7 moreDHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a...CVE-2018-1111Public exploitFix availableEPSS 97.9%7.5 High
- ijg libjpeg, canonical ubuntu linux, debian linux +10 more +12 moreAn issue was discovered in libjpeg 9a and 9d. The alloc_sarray function in jmemmgr.c allows...CVE-2018-11212Fix available6.5 Medium
- Show moreLoading…