Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,030

Export CSV
CVE-2018-16065

chromium-browser: Out of bounds write in V8

A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Debian Google Redhat
Products
Debian Linux Chrome Enterprise Linux Desktop and 3 more
CVE-2018-16062

elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Elfutils Project and 2 more
Products
Ubuntu Linux Debian Linux Elfutils and 6 more
CVE-2018-15911

ghostscript: Uninitialized memory access in the aesdecode operator (699665)

In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memory access in the aesdecode operator to crash the interpreter or potentially execute code.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Artifex Canonical Debian and 2 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 9 more
CVE-2018-15910

ghostscript: LockDistillerParams type confusion (699656)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the LockDistillerParams parameter to crash the interpreter or execute code.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Artifex Canonical Debian and 2 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 7 more
CVE-2018-15909

ghostscript: shading_param incomplete type checking (699660)

In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.

CVSS 3.0 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Artifex Canonical Debian and 2 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 9 more
CVE-2018-15908

ghostscript: .tempfile file permission issues (699657)

In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempfile restrictions and write files.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 6 more
CVE-2018-15127

libvncserver: Heap out-of-bounds write in rfbserver.c in rfbProcessFileTransferReadBuffer() allows for potential code execution

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution

CVSS 3.0 · 9.8 Critical EPSS 15.1% KEV · Not listed
Vendors
Canonical Debian Libvnc Project and 1 more
Products
Ubuntu Linux Debian Linux Libvncserver and 7 more
CVE-2018-14679

libmspack: off-by-one error in the CHM PMGI/PMGL chunk number validity checks

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. There is an off-by-one error in the CHM PMGI/PMGL chunk number validity checks, which could lead to denial of service (uninitialized data dereference and application crash).

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Cabextract Cabextract Project Canonical and 2 more
Products
Libmspack Cabextract Ubuntu Linux and 6 more
CVE-2018-14650

sos-collector: incorrect permissions set on newly created files

It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool readable by any local user. A local attacker may use this flaw by waiting for a legit user to run sos-collector and steal the collected data in the /var/tmp directory.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Sos-collector Project
Products
Enterprise Linux Enterprise Linux Desktop Enterprise Linux Server and 4 more
CVE-2018-14649

ceph-iscsi-cli: rbd-target-api service runs in debug mode allowing for remote command execution

It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=True in file /usr/bin/rbd-target-api provided by ceph-isci-cli package. This allows unauthenticated attackers to access this debug shell and escalate privileges. Once an attacker has successfully connected to this debug shell they will be able to execute arbitrary commands remotely. These commands will run with the same privileges as of user executing the application which is using python-werkzeug with debug shell mode enabled. In - Red Hat Ceph Storage 2 and 3, ceph-isci-cli package runs python-werkzeug library with root level permissions.

CVSS 3.0 · 9.8 Critical EPSS 12.0% KEV · Not listed
Vendors
Redhat
Products
Ceph-iscsi-cli Ceph Storage Enterprise Linux Desktop and 2 more
CVE-2018-14646

kernel: NULL pointer dereference in af_netlink.c:__netlink_ns_capable() allows for denial of service

The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Redhat
Products
Linux Kernel Enterprise Linux Enterprise Linux Desktop and 7 more