CVEs from 2018

3,289 normalized CVEs published or assigned in this year.

Total
3,289
critical
critical 225
high
high 266
medium
medium 224
low
low 32
% Critical
6.8%
% with KEV
2.7%
% with exploit
2.8%

Top products

  • erpnext 4
  • terminal_services_manager 1
  • ultraiso 1
  • dolibarr_erp\/crm 1
  • gitbucket 1
  • pdfunite 1
  • qemu 1
  • virtualization_manager 1
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2018-5153 critical 9.5 If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted. This can result in an out-of-bounds read with the read memory sent to the originating serve… archdebian
CVE-2018-10528 critical 9.5 An issue was discovered in LibRaw 0.18.9. There is a stack-based buffer overflow in the utf2char function in libraw_cxx.cpp. archdebian
CVE-2018-5164 critical 9.5 Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME type. This could allow for script to run where CSP should block… archdebian
CVE-2018-19876 critical 9.5 cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid… archdebian
CVE-2018-5186 critical 9.5 Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. T… archsusedebian
CVE-2018-12403 critical 9.5 If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not displayed to users. This vulnerability affects Firefox < 63. archsusedebian
CVE-2018-5169 critical 9.5 If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a normally-unlinkable chrome page as one of the hom… archdebian
CVE-2018-12376 critical 9.5 Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to … archsusedebian
CVE-2018-5129 critical 9.5 A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in th… archsusedebian
CVE-2018-6091 critical 9.5 multiple issues in chromium arch
CVE-2018-17464 critical 9.5 multiple issues in chromium arch
CVE-2018-6112 critical 9.5 multiple issues in chromium arch
CVE-2018-5179 critical 9.5 multiple issues in chromium arch
CVE-2018-11235 critical 9.5 In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a crafted .gitmodules file, a malicious project… archsusedebian
CVE-2018-6094 critical 9.5 multiple issues in chromium arch
CVE-2018-6102 critical 9.5 multiple issues in chromium arch
CVE-2018-18342 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18345 critical 9.5 multiple issues in chromium archdebian
CVE-2018-6114 critical 9.5 multiple issues in chromium arch
CVE-2018-12366 critical 9.5 An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability af… archsusedebian
CVE-2018-19628 critical 9.5 In Wireshark 2.6.0 to 2.6.4, the ZigBee ZCL dissector could crash. This was addressed in epan/dissectors/packet-zbee-zcl-lighting.c by preventing a divide-by-zero error. archdebian
CVE-2018-17465 critical 9.5 multiple issues in chromium arch
CVE-2018-19624 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference. archsusedebian
CVE-2018-18353 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18338 critical 9.5 multiple issues in chromium archdebian
CVE-2018-5182 critical 9.5 If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specified local file will be opened. This is contrary to policy a… archdebian
CVE-2018-6118 critical 9.5 arbitrary code execution in chromium arch
CVE-2018-18645 critical 9.5 multiple issues in gitlab arch
CVE-2018-12367 critical 9.5 In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTimi… archsusedebian
CVE-2018-5173 critical 9.5 The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to obscure the file extension of potentially exe… archdebian
CVE-2018-18502 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… archsusedebian
CVE-2018-6113 critical 9.5 multiple issues in chromium arch
CVE-2018-5764 critical 9.5 The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection me… archsusedebian
CVE-2018-18492 critical 9.5 A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection. This results in a potentially exploitable crash. T… archsusedebian
CVE-2018-5178 critical 9.5 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy ex… archdebian
CVE-2018-12364 critical 9.5 NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious sit… archsusedebian
CVE-2018-5125 critical 9.5 Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploit… archsusedebian
CVE-2018-17469 critical 9.5 multiple issues in chromium arch
CVE-2018-12372 critical 9.5 Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9. archsusedebian
CVE-2018-6085 critical 9.5 multiple issues in chromium arch
CVE-2018-5188 critical 9.5 Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could… archsusedebian
CVE-2018-17466 critical 9.5 multiple issues in chromium archsusedebian
CVE-2018-18339 critical 9.5 multiple issues in chromium archdebian
CVE-2018-17477 critical 9.5 multiple issues in chromium arch
CVE-2018-1057 critical 9.5 On a Samba 4 AD DC the LDAP server in all versions of Samba from 4.0.0 onwards incorrectly validates permissions to modify passwords over LDAP allowing authenticated users to change any other users' … archdebian
CVE-2018-12373 critical 9.5 dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affects Thunderbird < 52.9. archsusedebian
CVE-2018-17473 critical 9.5 multiple issues in chromium arch
CVE-2018-6107 critical 9.5 multiple issues in chromium arch
CVE-2018-6103 critical 9.5 multiple issues in chromium arch
CVE-2018-12362 critical 9.5 An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects … archsusedebian
CVE-2018-6101 critical 9.5 multiple issues in chromium arch
CVE-2018-6098 critical 9.5 multiple issues in chromium arch
CVE-2018-6100 critical 9.5 multiple issues in chromium arch
CVE-2018-11354 critical 9.5 In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string handling. archsusedebian
CVE-2018-6110 critical 9.5 multiple issues in chromium arch
CVE-2018-6096 critical 9.5 multiple issues in chromium arch
CVE-2018-6115 critical 9.5 multiple issues in chromium arch
CVE-2018-6095 critical 9.5 multiple issues in chromium arch
CVE-2018-11361 critical 9.5 In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey. archsusedebian
CVE-2018-5184 critical 9.5 Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. archdebian
CVE-2018-18335 critical 9.5 multiple issues in chromium archdebiansuse
CVE-2018-18505 critical 9.5 An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This … archsusedebian
CVE-2018-6111 critical 9.5 multiple issues in chromium arch
CVE-2018-6108 critical 9.5 multiple issues in chromium arch
CVE-2018-17471 critical 9.5 multiple issues in chromium arch
CVE-2018-12385 critical 9.5 A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination w… archsusedebian
CVE-2018-18503 critical 9.5 When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < … archsusedebian
CVE-2018-18337 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18351 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18648 critical 9.5 multiple issues in gitlab arch
CVE-2018-18493 critical 9.5 A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in … archsusedebian
CVE-2018-5146 critical 9.5 An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. archsusedebian
CVE-2018-6104 critical 9.5 multiple issues in chromium arch
CVE-2018-18344 critical 9.5 multiple issues in chromium archdebian
CVE-2018-12388 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… archdebian
CVE-2018-6117 critical 9.5 multiple issues in chromium arch
CVE-2018-6109 critical 9.5 multiple issues in chromium arch
CVE-2018-12360 critical 9.5 A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulne… archsusedebian
CVE-2018-5187 critical 9.5 Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to ru… archsusedebian
CVE-2018-5151 critical 9.5 Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary c… archsusedebian
CVE-2018-5157 critical 9.5 Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing… archdebian
CVE-2018-18506 critical 9.5 When proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC) file or if a PAC file is loaded locally, this PAC file can specify that requests to the localhost are to … archsusedebian
CVE-2018-5183 critical 9.5 Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerabil… archdebian
CVE-2018-18641 critical 9.5 multiple issues in gitlab arch
CVE-2018-12395 critical 9.5 By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are o… archsusedebian
CVE-2018-5144 critical 9.5 An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. archsusedebian
CVE-2018-12396 critical 9.5 A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites w… archsusedebian
CVE-2018-5168 critical 9.5 Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a malicious site to install a theme without… archdebian
CVE-2018-18494 critical 9.5 A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This i… archsusedebian
CVE-2018-17475 critical 9.5 multiple issues in chromium arch
CVE-2018-11357 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbuff.c by rejecting negative lengths. archsusedebian
CVE-2018-12390 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enoug… archsusedebian
CVE-2018-6090 critical 9.5 multiple issues in chromium arch
CVE-2018-19626 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination. archsusedebian
CVE-2018-19622 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the MMSE dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-mmse.c by preventing length overflows. archsusedebian
CVE-2018-11358 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet pre… archsusedebian
CVE-2018-5155 critical 9.5 A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, … archsusedebian
CVE-2018-15688 critical 9.5 A buffer overflow vulnerability in the dhcp6 client of systemd allows a malicious dhcp6 server to overwrite heap memory in systemd-networkd. Affected releases are systemd: versions up to and includin… archsusedebian
CVE-2018-11360 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fixing an off-by-one error that caused a bu… archsusedebian
CVE-2018-5711 critical 9.5 gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an in… archsusedebian