Export limit exceeded: 425857 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2018-11806

QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams

m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Qemu and 1 more
Products
Ubuntu Linux Debian Linux Qemu and 9 more
CVE-2018-11805

spamassassin: crafted configuration files can run system commands without any output or errors

In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be injected in a number of scenarios. In addition to upgrading to SA 3.4.3, we recommend that users should only use update channels or 3rd party .cf files from trusted places.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Spamassassin Debian Linux Enterprise Linux
CVE-2018-11798

thrift: Improper Access Control grants access to files outside the webservers docroot path

The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

CVSS 3.0 · 6.5 Medium EPSS 4.7% KEV · Not listed
Vendors
Apache Redhat
Products
Thrift Jboss Data Virtualization Jboss Fuse
CVE-2018-11796

tika: Incomplete fix allows for XML entity expansion resulting in denial of service

In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. However, Tika reuses SAXParsers and calls reset() after each parse, which, for Xerces2 parsers, as per the documentation, removes the user-specified SecurityManager and thus removes entity expansion limits after the first parse. Apache Tika versions from 0.1 to 1.19 are therefore still vulnerable to entity expansions which can lead to a denial of service attack. Users should upgrade to 1.19.1 or later.

CVSS 3.0 · 7.5 High EPSS 7.5% KEV · Not listed
Vendors
Apache Redhat
Products
Tika Jboss Fuse
CVE-2018-11782

subversion: remotely triggerable DoS vulnerability in svnserve 'get-deleted-rev'

In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request produces a particular answer. This can lead to disruption for users of the server.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Apache Redhat
Products
Subversion Enterprise Linux
CVE-2018-11775

activemq: ActiveMQ Client Missing TLS Hostname Verification

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

CVSS 3.0 · 7.4 High EPSS 7.0% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Activemq Enterprise Repository Flexcube Private Banking and 1 more
CVE-2018-11771

apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip

When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress' zip package.

CVSS 3.1 · 5.5 Medium EPSS 5.3% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Commons Compress Weblogic Server Jboss Fuse
CVE-2018-11763

httpd: DoS for HTTP/2 connections by continuous SETTINGS frames

In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol.

CVSS 3.0 · 5.9 Medium EPSS 51.0% KEV · Not listed
Vendors
Apache Canonical Netapp and 2 more
Products
Http Server Ubuntu Linux Storage Automation Store and 8 more
CVE-2018-11759

mod_jk: connector path traversal due to mishandled HTTP requests in httpd

The Apache Web Server (httpd) specific code that normalised the requested path before matching it to the URI-worker map in Apache Tomcat JK (mod_jk) Connector 1.2.0 to 1.2.44 did not handle some edge cases correctly. If only a sub-set of the URLs supported by Tomcat were exposed via httpd, then it was possible for a specially constructed request to expose application functionality through the reverse proxy that was not intended for clients accessing the application via the reverse proxy. It was also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is some overlap between this issue and CVE-2018-1323, they are not identical.

CVSS 3.0 · 7.5 High EPSS 90.6% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Tomcat Jk Connector Debian Linux Jboss Core Services
CVE-2018-11751

puppet-agent: Puppet Agent does not properly verify SSL connection when downloading a CRL

Previous versions of Puppet Agent didn't verify the peer in the SSL connection prior to downloading the CRL. This issue is resolved in Puppet Agent 6.4.0.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Puppet Redhat
Products
Puppet Server Satellite Satellite Capsule
CVE-2018-11713

webkitgtk: WebSockets don't use system proxy settings

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ prior to version 2.20.0 or without libsoup 2.62.0, unexpectedly failed to use system proxy settings for WebSocket connections. As a result, users could be deanonymized by crafted web sites via a WebSocket connection.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Gnome Redhat Webkitgtk
Products
Libsoup Enterprise Linux Webkitgtk\+
CVE-2018-11712

webkitgtk: Improper TLS certificate verification for WebSocket connections

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections.

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Redhat Webkitgtk
Products
Enterprise Linux Webkitgtk\+
CVE-2018-11685

liblouis: Stack-based buffer overflow in function compileHyphenation in compileTranslationTable.c

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Liblouis Opensuse and 1 more
Products
Ubuntu Linux Liblouis Leap and 1 more
CVE-2018-11684

liblouis: Stack-based buffer overflow in function includeFile in compileTranslationTable.c

Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c.

CVSS 3.0 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Liblouis Opensuse and 1 more
Products
Ubuntu Linux Liblouis Leap and 1 more
CVE-2018-11656

ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c

In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Imagemagick Redhat
Products
Ubuntu Linux Imagemagick Enterprise Linux
CVE-2018-11645

ghostscript: status command permitted with -dSAFER in psi/zfile.c allowing attackers to identify the size and existence of files

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.

CVSS 3.0 · 5.3 Medium EPSS 2.5% KEV · Not listed
Vendors
Artifex Redhat
Products
Ghostscript Enterprise Linux