CVEs from 2018

3,289 normalized CVEs published or assigned in this year.

Total
3,289
critical
critical 225
high
high 266
medium
medium 224
low
low 32
% Critical
6.8%
% with KEV
2.7%
% with exploit
2.8%

Top products

  • erpnext 4
  • terminal_services_manager 1
  • ultraiso 1
  • dolibarr_erp\/crm 1
  • gitbucket 1
  • pdfunite 1
  • qemu 1
  • virtualization_manager 1
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2018-10933 critical 9.5 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unautho… archsusedebian
CVE-2018-12379 critical 9.5 When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running t… archsusedebian
CVE-2018-6085 critical 9.5 multiple issues in chromium arch
CVE-2018-12398 critical 9.5 By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63. archdebian
CVE-2018-12396 critical 9.5 A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites w… archsusedebian
CVE-2018-18497 critical 9.5 Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argumen… archsusedebian
CVE-2018-18356 critical 9.5 multiple issues in chromium archdebiansuse
CVE-2018-5160 critical 9.5 WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder using uninitialized memory, leading to a pot… archdebian
CVE-2018-18504 critical 9.5 A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possi… archsusedebian
CVE-2018-18352 critical 9.5 multiple issues in chromium archdebian
CVE-2018-1000222 critical 9.5 Libgd version 2.2.5 contains a Double Free Vulnerability vulnerability in gdImageBmpPtr Function that can result in Remote Code Execution . This attack appear to be exploitable via Specially Crafted … archsusedebian
CVE-2018-5172 critical 9.5 The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF files. This could allow a malicious site… archdebian
CVE-2018-11233 critical 9.5 In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory. archdebian
CVE-2018-17462 critical 9.5 multiple issues in chromium arch
CVE-2018-12395 critical 9.5 By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are o… archsusedebian
CVE-2018-6112 critical 9.5 multiple issues in chromium arch
CVE-2018-5144 critical 9.5 An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. archsusedebian
CVE-2018-17474 critical 9.5 multiple issues in chromium arch
CVE-2018-18350 critical 9.5 multiple issues in chromium archdebian
CVE-2018-6109 critical 9.5 multiple issues in chromium arch
CVE-2018-17475 critical 9.5 multiple issues in chromium arch
CVE-2018-18357 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18336 critical 9.5 multiple issues in chromium archdebian
CVE-2018-19626 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination. archsusedebian
CVE-2018-18344 critical 9.5 multiple issues in chromium archdebian
CVE-2018-6105 critical 9.5 multiple issues in chromium arch
CVE-2018-6095 critical 9.5 multiple issues in chromium arch
CVE-2018-17477 critical 9.5 multiple issues in chromium arch
CVE-2018-17464 critical 9.5 multiple issues in chromium arch
CVE-2018-1000300 critical 9.5 curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based me… archdebian
CVE-2018-18348 critical 9.5 multiple issues in chromium archdebian
CVE-2018-6097 critical 9.5 multiple issues in chromium arch
CVE-2018-18343 critical 9.5 multiple issues in chromium archdebian
CVE-2018-12403 critical 9.5 If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. This vulnerability affects Firefox < 63. archsusedebian
CVE-2018-1000301 critical 9.5 curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end o… archdebian
CVE-2018-5169 critical 9.5 If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a normally-unlinkable chrome page as one of the hom… archdebian
CVE-2018-18340 critical 9.5 multiple issues in chromium archdebian
CVE-2018-12362 critical 9.5 An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects … archsusedebian
CVE-2018-12373 critical 9.5 dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird < 52.9. archsusedebian
CVE-2018-12385 critical 9.5 A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination w… archsusedebian
CVE-2018-5155 critical 9.5 A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, … archsusedebian
CVE-2018-17470 critical 9.5 multiple issues in chromium arch
CVE-2018-18359 critical 9.5 multiple issues in chromium archdebian
CVE-2018-5183 critical 9.5 Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerabil… archdebian
CVE-2018-5187 critical 9.5 Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to ru… archsusedebian
CVE-2018-6114 critical 9.5 multiple issues in chromium arch
CVE-2018-12388 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… archdebian
CVE-2018-11235 critical 9.5 In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project… archsusedebian
CVE-2018-18648 critical 9.5 multiple issues in gitlab arch
CVE-2018-18645 critical 9.5 multiple issues in gitlab arch
CVE-2018-1050 critical 9.5 All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on … archsusedebian
CVE-2018-12406 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… archsusedebian
CVE-2018-20346 critical 9.5 SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allow… archdebiansuse
CVE-2018-12405 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enoug… archsusedebian
CVE-2018-12363 critical 9.5 A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a… archsusedebian
CVE-2018-18646 critical 9.5 multiple issues in gitlab arch
CVE-2018-12392 critical 9.5 When manipulating user events in nested loops while opening a document through script, it is possible to trigger a potentially exploitable crash due to poor event handling. This vulnerability affects… archsusedebian
CVE-2018-18495 critical 9.5 WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading … archsusedebian
CVE-2018-12389 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that s… archdebian
CVE-2018-19628 critical 9.5 In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error. archdebian
CVE-2018-18643 critical 9.5 multiple issues in gitlab arch
CVE-2018-12407 critical 9.5 A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBuffer11 module. This results in a potentially explo… archsusedebian
CVE-2018-6098 critical 9.5 multiple issues in chromium arch
CVE-2018-5184 critical 9.5 Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. archdebian
CVE-2018-5164 critical 9.5 Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME type. This could allow for script to run where CSP should block… archdebian
CVE-2018-6107 critical 9.5 multiple issues in chromium arch
CVE-2018-6103 critical 9.5 multiple issues in chromium arch
CVE-2018-5178 critical 9.5 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy ex… archdebian
CVE-2018-12360 critical 9.5 A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulne… archsusedebian
CVE-2018-18358 critical 9.5 multiple issues in chromium archdebian
CVE-2018-11360 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a bu… archsusedebian
CVE-2018-17467 critical 9.5 multiple issues in chromium arch
CVE-2018-12386 critical 9.5 A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process whe… archsusedebian
CVE-2018-6092 critical 9.5 multiple issues in chromium arch
CVE-2018-12376 critical 9.5 Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to … archsusedebian
CVE-2018-5151 critical 9.5 Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary c… archsusedebian
CVE-2018-6108 critical 9.5 multiple issues in chromium arch
CVE-2018-5764 critical 9.5 The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection me… archsusedebian
CVE-2018-18506 critical 9.5 When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to … archsusedebian
CVE-2018-5163 critical 9.5 If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources stored in the JavaScript Start-up Bytecode… archdebian
CVE-2018-5186 critical 9.5 Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. T… archsusedebian
CVE-2018-12402 critical 9.5 The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when sub-resources are loaded as part of "Save Page As..." functionality. For exampl… archsusedebian
CVE-2018-5156 critical 9.5 A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potent… archsusedebian
CVE-2018-5167 critical 9.5 The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:" links as active, clickable hyperlinks in their output. Web sites should not be … archdebian
CVE-2018-5176 critical 9.5 The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScript script embedded as "javascript:" link… archdebian
CVE-2018-5129 critical 9.5 A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in th… archsusedebian
CVE-2018-11359 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a NULL pointer dereference. archsusedebian
CVE-2018-6088 critical 9.5 multiple issues in chromium arch
CVE-2018-6106 critical 9.5 multiple issues in chromium arch
CVE-2018-12370 critical 9.5 In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when Reader View is exited if loaded by a malicious site while Reader mode is active, … archsusedebian
CVE-2018-12358 critical 9.5 Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read responses which are supposed to be opaque. This vulnerability … archsusedebian
CVE-2018-5150 critical 9.5 Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… archsusedebian
CVE-2018-6100 critical 9.5 multiple issues in chromium arch
CVE-2018-11357 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths. archsusedebian
CVE-2018-12371 critical 9.5 An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting i… archsusedebian
CVE-2018-6089 critical 9.5 multiple issues in chromium arch
CVE-2018-12365 critical 9.5 A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private l… archsusedebian
CVE-2018-6099 critical 9.5 multiple issues in chromium arch
CVE-2018-5711 critical 9.5 gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an in… archsusedebian
CVE-2018-12399 critical 9.5 When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about which domain is registering the new protocol. This may result in the user approvin… archdebian