Skip to contentRedhat Linux Workstation vulnerabilities
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM). Supported...CVE-2018-3058Fix available4.3 Medium
- oracle jrockit, oracle corporation java, canonical ubuntu linux +24 more +26 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2952Fix available3.7 Low
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not...CVE-2018-14362Fix available9.8 Critical
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote...CVE-2018-14357Fix available9.8 Critical
- mutt, neomutt, canonical ubuntu linux +7 more +9 moreAn issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote...CVE-2018-14354Fix available9.8 Critical
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds...CVE-2018-10883Fix available4.8 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +5 more +7 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bound...CVE-2018-10881Fix available4.2 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +4 more +6 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a use-after-free...CVE-2018-10879Fix available4.2 Medium
- [unknown] kernel, debian linux, canonical ubuntu linux +3 more +5 moreA flaw was found in the Linux kernel's ext4 filesystem. A local user can cause an out-of-bounds...CVE-2018-10878Fix available4.8 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.113 and earlier versions have an Out-of-bounds read vulnerability....CVE-2018-50087.5 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player 30.0.0.113 and earlier versions have a Type Confusion vulnerability....CVE-2018-5007EPSS 17.8%8.8 High
- linux kernel, redhat enterprise linux, enterprise linux desktop +2 more +4 moreA flaw was found in the way the Linux kernel handled exceptions delivered after a stack switch...CVE-2018-108726.5 Medium
- arm cortex-a, cortex-r, fujitsu m12-1 firmware +223 more +225 moreSystems with microprocessors utilizing speculative execution and branch prediction may allow...CVE-2018-3693Fix available5.6 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreA flaw was found in the way signature calculation was handled by cephx authentication protocol....CVE-2018-1129Fix available6.5 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreIt was found that cephx authentication protocol did not verify ceph clients correctly and was...CVE-2018-1128Fix available7.5 High
- ceph, redhat ceph storage, debian linux +6 more +8 moreA flaw was found in the way ceph mon handles user requests. Any authenticated ceph user having...CVE-2018-10861Fix available8.1 High
- libpng, canonical ubuntu linux, oracle jdk +4 more +6 moreIn libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function ...CVE-2018-13785Fix available6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreThe inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users...CVE-2018-13405Public exploitFix available7.8 High
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 morePlaintext of decrypted emails can leak through by user submitting an embedded form by pressing...CVE-2018-12374Fix available4.3 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moredDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when...CVE-2018-12373Fix available6.5 Medium
- mozilla thunderbird, canonical ubuntu linux, debian linux +4 more +6 moreDecrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when...CVE-2018-12372Fix available6.5 Medium
- [unknown] setup, redhat enterprise linux desktop, enterprise linux server +1 more +3 moresetup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and...CVE-2018-1113Fix available4.8 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,...CVE-2018-13033Fix available5.5 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreVulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs)....CVE-2018-3081Fix available5.0 Medium
- gnome libsoup, canonical ubuntu linux, debian linux +6 more +8 moreThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...CVE-2018-12910Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...CVE-2018-5188Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA vulnerability can occur when capturing a media stream when the media source type is changed as...CVE-2018-5156Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...CVE-2018-12366Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA compromised IPC child process can escape the content sandbox and list the names of arbitrary...CVE-2018-12365Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...CVE-2018-12364Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...CVE-2018-12363Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...CVE-2018-12362Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA use-after-free vulnerability can occur when deleting an input element during a mutation event...CVE-2018-12360Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreA buffer overflow can occur when rendering canvas content while adjusting the height and width of...CVE-2018-12359Fix available8.8 High
- [unknown] sssd, debian linux, redhat enterprise linux desktop +2 more +4 moreThe UNIX pipe which sudo uses to contact SSSD and read the available sudo rules from SSSD has too...CVE-2018-10852Fix available3.8 Low
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow...CVE-2018-5002In KEVFix availableEPSS 24.4%7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Out-of-bounds read vulnerability....CVE-2018-5001Fix availableEPSS 13.1%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability....CVE-2018-5000Fix availableEPSS 13.7%6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player versions 29.0.0.171 and earlier have a Type Confusion vulnerability....CVE-2018-4945Fix available8.8 High
- intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 moreSystem software utilizing Lazy FP state restore technique on systems using Intel Core-based...CVE-2018-3665Fix available5.6 Medium
- [unknown] 389-ds-base, debian linux, fedoraproject 389 directory server +7 more +9 more389-ds-base before versions 1.4.0.10, 1.3.8.3 is vulnerable to a race condition in the way 389-ds...CVE-2018-10850Fix available5.9 Medium
- qemu, canonical ubuntu linux, debian linux +8 more +10 morem_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.CVE-2018-11806Fix available8.2 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +8 more +10 moreLibgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA...CVE-2018-0495Fix available4.7 Medium
- debian linux, google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +4 more +6 moreIn the function wmi_set_ie(), the length validation code does not handle unsigned integer...CVE-2018-5848Fix available7.8 High
- codehaus plexus-archiver, debian linux, redhat enterprise linux +2 more +4 moreImproper Limitation of a Pathname to a Restricted Directory in plexus-archiverCVE-2018-1002200Public exploitFix availableEPSS 11.6%5.5 Medium
- gnupg, canonical ubuntu linux, debian linux +6 more +8 moremainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...CVE-2018-12020Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62...CVE-2018-6147Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreOff-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6144Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...CVE-2018-6143Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed...CVE-2018-6141Fix available8.8 High
- Show moreLoading…