Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425860 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2018-13094

kernel: NULL pointer dereference in xfs_da_shrink_inode function

An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 1 more
CVE-2018-13093

kernel: NULL pointer dereference in lookup_slow function

An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Extras Rt
CVE-2018-13053

kernel: Integer overflow in the alarm_timer_nsleep function

The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 2 more
CVE-2018-13033

binutils: Uncontrolled Resource Consumption in execution of nm

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

CVSS 3.0 · 5.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 3 more
CVE-2018-12931

kernel: stack-based out-of-bounds write in ntfs_attr_find in the ntfs.ko

ntfs_attr_find in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Mrg
CVE-2018-12930

kernel: stack-based out-of-bounds write in ntfs_end_buffer_async_read in the ntfs.ko

ntfs_end_buffer_async_read in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a stack-based out-of-bounds write and cause a denial of service (kernel oops or panic) or possibly have unspecified other impact via a crafted ntfs filesystem.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Mrg
CVE-2018-12929

kernel: use-after-free in ntfs_read_locked_inode in the ntfs.ko

ntfs_read_locked_inode in the ntfs.ko filesystem driver in the Linux kernel 4.15.0 allows attackers to trigger a use-after-free read and possibly cause a denial of service (kernel oops or panic) via a crafted ntfs filesystem.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Mrg
CVE-2018-12910

libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

CVSS 3.0 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
Canonical Debian Gnome and 2 more
Products
Ubuntu Linux Debian Linux Libsoup and 7 more
CVE-2018-12900

libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution

Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.

CVSS 3.0 · 8.8 High EPSS 24.8% KEV · Not listed
Vendors
Canonical Libtiff Redhat
Products
Ubuntu Linux Libtiff Enterprise Linux
CVE-2018-12828

flash-plugin: Privilege Escalation vulnerability (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation.

CVSS 3.0 · 9.8 Critical EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more
CVE-2018-12827

flash-plugin: Information Disclosure vulnerabilities (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS 3.0 · 7.5 High EPSS 31.7% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more
CVE-2018-12826

flash-plugin: Information Disclosure vulnerabilities (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more
CVE-2018-12825

flash-plugin: Security Mitigation Bypass vulnerability (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.

CVSS 3.0 · 9.8 Critical EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more
CVE-2018-12699

binutils: heap-based buffer overflow in finish_stab in stabs.c

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.

CVSS 3.0 · 9.8 Critical EPSS 4.6% KEV · Not listed
Vendors
Canonical Gnu Redhat
Products
Ubuntu Linux Binutils Enterprise Linux
CVE-2018-12697

binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.

A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.

CVSS 3.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Canonical Gnu Redhat
Products
Ubuntu Linux Binutils Ansible Tower and 1 more
CVE-2018-12641

binutils: Stack Exhaustion in the demangling functions provided by libiberty

An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Ansible Tower Enterprise Linux
CVE-2018-12608

moby: cert signing bypass

An issue was discovered in Docker Moby before 17.06.0. The Docker engine validated a client TLS certificate using both the configured client CA root certificate and all system roots on non-Windows systems. This allowed a client with any domain validated certificate signed by a system-trusted root CA (as opposed to one signed by the configured CA root certificate) to authenticate.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mobyproject Redhat
Products
Moby Service Mesh
CVE-2018-12599

ImageMagick: out of bounds write in ReadBMPImage and WriteBMPImage in coders/bmp.c

In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file.

CVSS 3.0 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Imagemagick and 1 more
Products
Ubuntu Linux Debian Linux Imagemagick and 1 more