Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2,219

Export CSV
CVE-2018-16846

ceph: ListBucket max-keys has no defined limit in the RGW codebase

It was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial of service against OMAPs holding bucket indices.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Opensuse and 1 more
Products
Ubuntu Linux Debian Linux Leap and 3 more
CVE-2018-16802

ghostscript: Incorrect "restoration of privilege" checking when running out of stack during exception handling

An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 7 more
CVE-2018-16542

ghostscript: .definemodifiedfont memory corruption if /typecheck is handled (699668)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interpreter stack-size checking during error handling to crash the interpreter.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 5 more
CVE-2018-16541

ghostscript: Incorrect free logic in pagedevice replacement (699664)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in pagedevice replacement to crash the interpreter.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 7 more
CVE-2018-16540

ghostscript: use-after-free in copydevice handling (699661)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter could use a use-after-free in copydevice handling to crash the interpreter or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 8 more
CVE-2018-16539

ghostscript: incorrect access checking in temp file handling to disclose contents of files (699658)

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 7 more
CVE-2018-16511

ghostscript: missing type check in type checker (699659)

An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Ubuntu Linux Debian Linux and 7 more
CVE-2018-16509

ghostscript: /invalidaccess bypass after failed restore (699654)

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.

CVSS 3.0 · 7.8 High EPSS 92.3% KEV · Not listed
Vendors
Artifex Canonical Debian and 1 more
Products
Ghostscript Gpl Ghostscript Ubuntu Linux and 6 more
CVE-2018-16435

lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow

Little CMS (aka Little Color Management System) 2.9 has an integer overflow in the AllocateDataSet function in cmscgats.c, leading to a heap-based buffer overflow in the SetData function via a crafted file in the second argument to cmsIT8LoadFromFile.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Debian Littlecms and 1 more
Products
Ubuntu Linux Debian Linux Little Cms Color Engine and 4 more
CVE-2018-16402

elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Elfutils Project and 2 more
Products
Ubuntu Linux Debian Linux Elfutils and 7 more
CVE-2018-16084

chromium-browser: User confirmation bypass in external protocol handling

The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain operations to open external programs via a crafted HTML page.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Enterprise Linux Server and 2 more
CVE-2018-16081

chromium-browser: Local file access in DevTools

Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.

CVSS 3.0 · 7.4 High EPSS 1.0% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Enterprise Linux Server and 2 more
CVE-2018-16079

chromium-browser: URL spoof in permission dialogs

A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.0 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Enterprise Linux Server and 2 more
CVE-2018-16078

chromium-browser: Credit card information leak in Autofill

Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Enterprise Linux Server and 2 more