Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,351

Export CSV
CVE-2018-5344

kernel: drivers/block/loop.c mishandles lo_release serialization allowing denial-of-service

In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 5 more
CVE-2018-5333

kernel: Null pointer dereference in rds_atomic_free_op() allowing denial-of-service

In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning fails or an invalid address is supplied, leading to an rds_atomic_free_op NULL pointer dereference.

CVSS 3.0 · 5.5 Medium EPSS 7.2% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 1 more
CVE-2018-5332

kernel: rds_message_alloc_sgs() function doesn't validate value used during DMA page allocation causes heap out-of-bounds write

In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 1 more
CVE-2018-5248

ImageMagick: Heap-based buffer over-read in the ReadSIXELImage function in coders/sixel.c

In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function.

CVSS 3.0 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2018-5188

Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9

Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Mozilla and 1 more
Products
Ubuntu Linux Debian Linux Firefox and 9 more
CVE-2018-5186

Mozilla: Memory safety bugs fixed in Firefox 61

Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 61.

CVSS 3.0 · 9.8 Critical EPSS 2.2% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5185

Mozilla: Leaking plaintext through HTML forms

Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Mozilla and 1 more
Products
Ubuntu Linux Debian Linux Thunderbird and 8 more
CVE-2018-5184

Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack

Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Mozilla and 1 more
Products
Ubuntu Linux Debian Linux Thunderbird and 8 more
CVE-2018-5182

Mozilla: Local file can be displayed from hyperlink dragged and dropped on addressbar

If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specified local file will be opened. This is contrary to policy and is what would happen if the string were the equivalent "file:" URL. This vulnerability affects Firefox < 60.

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5181

Mozilla: Local file can be displayed in noopener tab through drag and drop of hyperlink

If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresponding to the dropped URL, contrary to policy. One way to make the target tab open more reliably in a separate process is to open it with the "noopener" keyword. This vulnerability affects Firefox < 60.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5180

Mozilla: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced

A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash, the vulnerability is limited because the memory is freed and reused in a brief window of time during the freeing of the same callstack. This vulnerability affects Firefox < 60.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5177

Mozilla: Buffer overflow in XSLT during number formatting

A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer overflow and crash if it occurs. This vulnerability affects Firefox < 60.

CVSS 3.0 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5176

Mozilla: JSON Viewer script injection

The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScript script embedded as "javascript:" links, users may be tricked into clicking and running this code in the context of the JSON Viewer. This can allow for the theft of cookies and authorization tokens which are accessible to that context. This vulnerability affects Firefox < 60.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5175

Mozilla: Universal CSP bypass on sites using strict-dynamic in their policies

A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dynamic'". If a target website contains an HTML injection flaw an attacker could inject a reference to a copy of the "require.js" library that is part of Firefox's Developer Tools, and then use a known technique using that library to bypass the CSP restrictions on executing injected scripts. This vulnerability affects Firefox < 60.

CVSS 3.0 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5173

Mozilla: File name spoofing of Downloads panel with Unicode characters

The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to obscure the file extension of potentially executable files from user view in the panel. Note: the dialog to open the file will show the full, correct filename and whether it is executable or not. This vulnerability affects Firefox < 60.

CVSS 3.0 · 5.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5172

Mozilla: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer

The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site to socially engineer a user to copy and paste malicious script content that could then run with the context of either page but does not allow for privilege escalation. This vulnerability affects Firefox < 60.

CVSS 3.0 · 4.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Mozilla
Products
Ubuntu Linux Firefox
CVE-2018-5170

Mozilla: Filename spoofing for external attachments

It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is a different file type than expected. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.

CVSS 3.0 · 4.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Mozilla and 1 more
Products
Ubuntu Linux Debian Linux Thunderbird and 8 more