Export limit exceeded: 11555 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 24818 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24,818

Export CSV
CVE-2018-1000863

jenkins: forced migration of user records (SECURITY-1072)

A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.java that allows attackers to submit crafted user names that can cause an improper migration of user record storage formats, potentially preventing the victim from logging into Jenkins.

CVSS 3.0 · 8.2 High EPSS 6.8% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift Openshift Container Platform
CVE-2018-1000862

jenkins: workspace browser allowed accessing files outside the workspace (SECURITY-904)

An information exposure vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in DirectoryBrowserSupport.java that allows attackers with the ability to control build output to browse the file system on agents running builds beyond the duration of the build using the workspace browser.

CVSS 3.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift Openshift Container Platform
CVE-2018-1000858

gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service

GnuPG version 2.1.12 - 2.2.11 contains a Cross ite Request Forgery (CSRF) vulnerability in dirmngr that can result in Attacker controlled CSRF, Information Disclosure, DoS. This attack appear to be exploitable via Victim must perform a WKD request, e.g. enter an email address in the composer window of Thunderbird/Enigmail. This vulnerability appears to have been fixed in after commit 4a4bb874f63741026bd26264c43bb32b1099f060.

CVSS 3.0 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Canonical Gnupg Redhat
Products
Ubuntu Linux Gnupg Enterprise Linux
CVE-2018-1000852

freerdp: out of bounds read in drdynvc_process_capability_request

FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvc_main.c, drdynvc_process_capability_request that can result in The RDP server can read the client's memory.. This attack appear to be exploitable via RDPClient must connect the rdp server with echo option. This vulnerability appears to have been fixed in after commit 205c612820dac644d665b5bb1cdf437dc5ca01e3.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Fedoraproject Freerdp and 1 more
Products
Ubuntu Linux Fedora Freerdp and 1 more
CVE-2018-1000850

retrofit: Directory traversal in RequestBuilder allows manipulation of resources

Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack appear to be exploitable via An attacker should have access to an encoded path parameter on POST, PUT or DELETE request.. This vulnerability appears to have been fixed in 2.5.0 and later.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Redhat Squareup
Products
Jboss Fuse Retrofit
CVE-2018-1000808

pyOpenSSL: Failure to release memory before removing last reference in PKCS #12 Store

Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denial of service if memory runs low or is exhausted. This attack appear to be exploitable via Depends upon calling application, however it could be as simple as initiating a TLS connection. Anything that would cause the calling application to reload certificates from a PKCS #12 store.. This vulnerability appears to have been fixed in 17.5.0.

CVSS 3.0 · 5.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Pyopenssl Project Redhat
Products
Ubuntu Linux Pyopenssl Enterprise Linux Desktop and 4 more
CVE-2018-1000807

pyOpenSSL: Use-after-free in X509 object handling

Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possible denial of service or remote code execution.. This attack appear to be exploitable via Depends on the calling application and if it retains a reference to the memory.. This vulnerability appears to have been fixed in 17.5.0.

CVSS 3.1 · 8.1 High EPSS 4.1% KEV · Not listed
Vendors
Canonical Pyopenssl Redhat
Products
Ubuntu Linux Pyopenssl Enterprise Linux Desktop and 3 more
CVE-2018-1000805

python-paramiko: Authentication bypass in auth_handler.py

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

CVSS 3.1 · 8.8 High EPSS 4.4% KEV · Not listed
Vendors
Canonical Debian Paramiko and 1 more
Products
Ubuntu Linux Debian Linux Paramiko and 12 more
CVE-2018-1000801

okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Kde Redhat
Products
Debian Linux Okular Enterprise Linux
CVE-2018-1000656

python-flask: Denial of Service via crafted JSON file

The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. This vulnerability appears to have been fixed in 0.12.3. NOTE: this may overlap CVE-2019-1010083.

CVSS 3.1 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Netapp Palletsprojects Redhat
Products
Active Iq Hyper Converged Infrastructure Ontap Select Deploy Utility and 2 more
CVE-2018-1000632

dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

CVSS 3.1 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Debian Dom4j Project Netapp and 2 more
Products
Debian Linux Dom4j Oncommand Workflow Automation and 14 more
CVE-2018-1000622

rust: rustdoc loads plugins from world writable directory allowing for arbitrary code execution

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

CVSS 3.0 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Redhat Rust-lang
Products
Devtools Rust
CVE-2018-1000544

rubyzip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file

rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip files , an attacker can upload a malicious file that contains symlinks or files with absolute pathnames "../" to write arbitrary files to the filesystem..

CVSS 3.1 · 9.8 Critical EPSS 4.3% KEV · Not listed
Vendors
Debian Redhat Rubyzip Project
Products
Debian Linux Cloudforms Cloudforms Managementengine and 1 more
CVE-2018-1000410

jenkins: Failures to process form submission data could result in secrets being displayed or written to logs

An information exposure vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier, and the Stapler framework used by these releases, in core/src/main/java/org/kohsuke/stapler/RequestImpl.java, core/src/main/java/hudson/model/Descriptor.java that allows attackers with Overall/Administer permission or access to the local file system to obtain credentials entered by users if the form submission could not be successfully processed.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-1000409

jenkins: Session fixation vulnerability on user signup

A session fixation vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that prevented Jenkins from invalidating the existing session and creating a new one when a user signed up for a new user account.

CVSS 3.0 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-1000408

jenkins: Ephemeral user record creation

A denial of service vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/security/HudsonPrivateSecurityRealm.java that allows attackers without Overall/Read permission to access a specific URL on instances using the built-in Jenkins user database security realm that results in the creation of an ephemeral user record in memory.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-1000407

jenkins: Reflected XSS vulnerability

A cross-site scripting vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/Api.java that allows attackers to specify URLs to Jenkins that result in rendering arbitrary attacker-controlled HTML by Jenkins.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-1000406

jenkins: Arbitrary file write vulnerability using file parameter definitions

A path traversal vulnerability exists in Jenkins 2.145 and earlier, LTS 2.138.1 and earlier in core/src/main/java/hudson/model/FileParameterValue.java that allows attackers with Job/Configure permission to define a file parameter with a file name outside the intended directory, resulting in an arbitrary file write on the Jenkins master when scheduling a build.

CVSS 3.0 · 6.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Jenkins Redhat
Products
Jenkins Openshift
CVE-2018-1000400

cri-o: capabilities are not dropped when switching to a non-root user

Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Kubernetes Redhat
Products
Cri-o Openshift
CVE-2018-1000204

kernel: Infoleak caused by incorrect handling of the SG_IO ioctl

Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV and an empty 6-byte cmdp. This may lead to copying up to 1000 kernel heap pages to the userspace. This has been fixed upstream in https://github.com/torvalds/linux/commit/a45b599ad808c3c982fdcdc12b0b8611c2f92824 already. The problem has limited scope, as users don't usually have permissions to access SCSI devices. On the other hand, e.g. the Nero user manual suggests doing `chmod o+r+w /dev/sg*` to make the devices accessible. NOTE: third parties dispute the relevance of this report, noting that the requirement for an attacker to have both the CAP_SYS_ADMIN and CAP_SYS_RAWIO capabilities makes it "virtually impossible to exploit.

CVSS 3.0 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Linux and 1 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 1 more