Export limit exceeded: 24818 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2018-14599

libX11: Off-by-one error in XListExtensions in ListExt.c

An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.

CVSS 3.1 · 9.8 Critical EPSS 4.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 5 more
CVE-2018-14598

libX11: Crash on invalid reply in XListExtensions in ListExt.c

An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation fault).

CVSS 3.0 · 7.5 High EPSS 4.2% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2018-14553

gd: NULL pointer dereference in gdImageClone

gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call sequence. Only affects PHP when linked with an external libgd (not bundled).

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 3 more
CVE-2018-14526

wpa_supplicant: Unauthenticated EAPOL-Key decryption in wpa_supplicant

An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Redhat and 1 more
Products
Ubuntu Linux Debian Linux Enterprise Linux and 1 more
CVE-2018-14498

libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service

get_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted 8-bit BMP in which one or more of the color indices is out of range for the number of palette entries.

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Debian Fedoraproject Libjpeg-turbo and 3 more
Products
Debian Linux Fedora Libjpeg-turbo and 3 more
CVE-2018-14464

tcpdump: Buffer over-read in lmp_print_data_link_subobjs() function in print-lmp.c

The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs().

CVSS 3.1 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Apple Debian Fedoraproject and 3 more
Products
Mac Os X Debian Linux Fedora and 3 more
CVE-2018-14432

openstack-keystone: Information Exposure through /v3/OS-FEDERATION/projects

In the Federation component of OpenStack Keystone before 11.0.4, 12.0.0, and 13.0.0, an authenticated "GET /v3/OS-FEDERATION/projects" request may bypass intended access restrictions on listing projects. An authenticated user may discover projects they have no authority to access, leaking all projects in the deployment and their attributes. Only Keystone with the /v3/OS-FEDERATION endpoint enabled via policy.json is affected.

CVSS 3.0 · 5.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Debian Openstack Redhat
Products
Debian Linux Keystone Openstack
CVE-2018-14371

mojarra: Path traversal in ResourceManager.java:getLocalePrefix() via the loc parameter

The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.

CVSS 3.0 · 7.5 High EPSS 4.4% KEV · Not listed
Vendors
Eclipse Redhat
Products
Mojarra Jboss Enterprise Application Platform Jboss Enterprise Application Platform Cd and 1 more
CVE-2018-14368

wireshark: Bazaar dissector infinite loop (wnpa-sec-2018-40)

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the Bazaar protocol dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by properly handling items that are too long.

CVSS 3.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian Redhat Wireshark
Products
Debian Linux Enterprise Linux Wireshark
CVE-2018-14362

mutt: POP body caching path traversal vulnerability

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14357

mutt: Remote Code Execution via backquote characters

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 8 more
CVE-2018-14355

mutt: IMAP header caching path traversal vulnerability

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.

CVSS 3.1 · 5.3 Medium EPSS 3.2% KEV · Not listed
Vendors
Canonical Debian Mutt and 2 more
Products
Ubuntu Linux Debian Linux Mutt and 2 more