Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17,086

Export CSV
CVE-2018-13988

poppler: out of bounds read in pdfunite

Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory access that is not mapped in its memory space, as demonstrated by pdfunite. This can result in memory corruption and denial of service. This may be exploitable when a victim opens a specially crafted PDF file.

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Freedesktop and 1 more
Products
Ubuntu Linux Debian Linux Poppler and 6 more
CVE-2018-13796

mailman: Mishandled URLs in Utils.py:GetPathPieces() allows attackers to display arbitrary text on trusted sites

An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

CVSS 3.0 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Gnu Redhat
Products
Mailman Enterprise Linux
CVE-2018-13405

kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members

The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Canonical Debian F5 and 3 more
Products
Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 31 more
CVE-2018-13346

mercurial: Missing check for fragment start position in mpatch.c:mpatch_apply()

The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Mercurial Redhat
Products
Mercurial Enterprise Linux
CVE-2018-13259

zsh: Improper handling of shebang line longer than 64

An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to an execve call to a program name that is a substring of the intended one.

CVSS 3.0 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Canonical Redhat Zsh
Products
Ubuntu Linux Enterprise Linux Zsh
CVE-2018-13139

libsndfile: stack-based buffer overflow in sndfile-deinterleave utility

A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave.

CVSS 3.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Debian Libsndfile Project Redhat
Products
Debian Linux Libsndfile Enterprise Linux
CVE-2018-13095

kernel: NULL pointer dereference in fs/xfs/libxfs/xfs_inode_buf.c

An issue was discovered in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.17.3. A denial of service (memory corruption and BUG) can occur for a corrupted xfs image upon encountering an inode that is in extent format, but has more extents than fit in the inode fork.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Extras Rt
CVE-2018-13094

kernel: NULL pointer dereference in xfs_da_shrink_inode function

An issue was discovered in fs/xfs/libxfs/xfs_attr_leaf.c in the Linux kernel through 4.17.3. An OOPS may occur for a corrupted xfs image after xfs_da_shrink_inode() is called with a NULL bp.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Linux Redhat
Products
Ubuntu Linux Linux Kernel Enterprise Linux and 1 more
CVE-2018-13093

kernel: NULL pointer dereference in lookup_slow function

An issue was discovered in fs/xfs/xfs_icache.c in the Linux kernel through 4.17.3. There is a NULL pointer dereference and panic in lookup_slow() on a NULL inode->i_ops pointer when doing pathwalks on a corrupted xfs image. This occurs because of a lack of proper validation that cached inodes are free during allocation.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Rhel Extras Rt
CVE-2018-13053

kernel: Integer overflow in the alarm_timer_nsleep function

The alarm_timer_nsleep function in kernel/time/alarmtimer.c in the Linux kernel through 4.17.3 has an integer overflow via a large relative timeout because ktime_add_safe is not used.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 2 more
CVE-2018-13033

binutils: Uncontrolled Resource Consumption in execution of nm

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

CVSS 3.0 · 5.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Gnu Redhat
Products
Binutils Enterprise Linux Enterprise Linux Desktop and 3 more
CVE-2018-12910

libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames

The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname.

CVSS 3.0 · 9.8 Critical EPSS 4.1% KEV · Not listed
Vendors
Canonical Debian Gnome and 2 more
Products
Ubuntu Linux Debian Linux Libsoup and 7 more
CVE-2018-12900

libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution

Heap-based buffer overflow in the cpSeparateBufToContigBuf function in tiffcp.c in LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0beta7, 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6, 4.0.7, 4.0.8 and 4.0.9 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via a crafted TIFF file.

CVSS 3.0 · 8.8 High EPSS 24.8% KEV · Not listed
Vendors
Canonical Libtiff Redhat
Products
Ubuntu Linux Libtiff Enterprise Linux
CVE-2018-12828

flash-plugin: Privilege Escalation vulnerability (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation.

CVSS 3.0 · 9.8 Critical EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more
CVE-2018-12827

flash-plugin: Information Disclosure vulnerabilities (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS 3.0 · 7.5 High EPSS 31.7% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more
CVE-2018-12826

flash-plugin: Information Disclosure vulnerabilities (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more
CVE-2018-12825

flash-plugin: Security Mitigation Bypass vulnerability (APSB18-25)

Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.

CVSS 3.0 · 9.8 Critical EPSS 7.0% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Flash Player Mac Os X Chrome Os and 8 more