CVEs from 2018

3,288 normalized CVEs published or assigned in this year.

Total
3,288
critical
critical 226
high
high 266
medium
medium 224
low
low 32
% Critical
6.9%
% with KEV
2.7%
% with exploit
2.8%

Top products

  • erpnext 4
  • terminal_services_manager 1
  • ultraiso 1
  • dolibarr_erp\/crm 1
  • gitbucket 1
  • pdfunite 1
  • qemu 1
  • virtualization_manager 1
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2018-19625 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the dissection engine could crash. This was addressed in epan/tvbuff_composite.c by preventing a heap-based buffer over-read. archsusedebian
CVE-2018-5147 critical 9.5 The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms. This vulnerability affects Firefox ESR < 52.7.2 and Firef… archsusedebian
CVE-2018-6086 critical 9.5 multiple issues in chromium arch
CVE-2018-12407 critical 9.5 A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, when working with the VertexBuffer11 module. This results in a potentially explo… archsusedebian
CVE-2018-5188 critical 9.5 Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could… archsusedebian
CVE-2018-18640 critical 9.5 multiple issues in gitlab arch
CVE-2018-10529 critical 9.5 An issue was discovered in LibRaw 0.18.9. There is an out-of-bounds read affecting the X3F property table list implementation in libraw_x3f.cpp and libraw_cxx.cpp. archdebian
CVE-2018-11358 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet pre… archsusedebian
CVE-2018-18493 critical 9.5 A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in … archsusedebian
CVE-2018-5711 critical 9.5 gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an in… archsusedebian
CVE-2018-5159 critical 9.5 An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially e… archdebian
CVE-2018-12395 critical 9.5 By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through domain fronting. This would allow access to domains that share a host that are o… archsusedebian
CVE-2018-18344 critical 9.5 multiple issues in chromium archdebian
CVE-2018-6109 critical 9.5 multiple issues in chromium arch
CVE-2018-11355 critical 9.5 In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks. archsusedebian
CVE-2018-11356 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL pointer dereference for an empty name in … archsusedebian
CVE-2018-12374 critical 9.5 Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vulnerability affects Thunderbird < 52.9. archsusedebian
CVE-2018-5144 critical 9.5 An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. archsusedebian
CVE-2018-19627 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/vwr.c by adjusting a buffer boundary. archdebian
CVE-2018-19624 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the PVFS dissector could crash. This was addressed in epan/dissectors/packet-pvfs2.c by preventing a NULL pointer dereference. archsusedebian
CVE-2018-1000301 critical 9.5 curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end o… archdebian
CVE-2018-19626 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the DCOM dissector could crash. This was addressed in epan/dissectors/packet-dcom.c by adding '\0' termination. archsusedebian
CVE-2018-12388 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… archdebian
CVE-2018-10933 critical 9.5 A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unautho… archsusedebian
CVE-2018-12367 critical 9.5 In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the ability to measure precise time intervals. In that work PerformanceNavigationTimi… archsusedebian
CVE-2018-5176 critical 9.5 The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScript script embedded as "javascript:" link… archdebian
CVE-2018-6156 critical 9.5 Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. archdebian
CVE-2018-5178 critical 9.5 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy ex… archdebian
CVE-2018-12364 critical 9.5 NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious sit… archsusedebian
CVE-2018-19876 critical 9.5 cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid… archdebian
CVE-2018-5184 critical 9.5 Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. archdebian
CVE-2018-12372 critical 9.5 Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9. archsusedebian
CVE-2018-12361 critical 9.5 An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which resul… archsusedebian
CVE-2018-12359 critical 9.5 A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundari… archsusedebian
CVE-2018-18494 critical 9.5 A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries(). This i… archsusedebian
CVE-2018-18500 critical 9.5 A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a pote… archsusedebian
CVE-2018-18501 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enoug… archsusedebian
CVE-2018-5145 critical 9.5 Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary cod… archsusedebian
CVE-2018-6112 critical 9.5 multiple issues in chromium arch
CVE-2018-11362 critical 9.5 In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buffer over-read upon encountering a missing… archsusedebian
CVE-2018-6095 critical 9.5 multiple issues in chromium arch
CVE-2018-5127 critical 9.5 A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR… archsusedebian
CVE-2018-5150 critical 9.5 Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… archsusedebian
CVE-2018-17481 critical 9.5 multiple issues in chromium archdebian
CVE-2018-12405 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enoug… archsusedebian
CVE-2018-5183 critical 9.5 Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerabil… archdebian
CVE-2018-5187 critical 9.5 Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to ru… archsusedebian
CVE-2018-12371 critical 9.5 An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting i… archsusedebian
CVE-2018-12365 critical 9.5 A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private l… archsusedebian
CVE-2018-18649 critical 9.5 multiple issues in gitlab arch
CVE-2018-12370 critical 9.5 In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when Reader View is exited if loaded by a malicious site while Reader mode is active, … archsusedebian
CVE-2018-18351 critical 9.5 multiple issues in chromium archdebian
CVE-2018-17468 critical 9.5 multiple issues in chromium arch
CVE-2018-18648 critical 9.5 multiple issues in gitlab arch
CVE-2018-18645 critical 9.5 multiple issues in gitlab arch
CVE-2018-5129 critical 9.5 A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in th… archsusedebian
CVE-2018-17469 critical 9.5 multiple issues in chromium arch
CVE-2018-11361 critical 9.5 In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE processing in Dot11DecryptTDLSDeriveKey. archsusedebian
CVE-2018-18353 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18338 critical 9.5 multiple issues in chromium archdebian
CVE-2018-5764 critical 9.5 The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection me… archsusedebian
CVE-2018-18347 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18354 critical 9.5 multiple issues in chromium archdebian
CVE-2018-1000300 critical 9.5 curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based me… archdebian
CVE-2018-1050 critical 9.5 All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on … archsusedebian
CVE-2018-18355 critical 9.5 multiple issues in chromium archdebian
CVE-2018-12379 critical 9.5 When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running t… archsusedebian
CVE-2018-5146 critical 9.5 An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. archsusedebian
CVE-2018-19623 critical 9.5 In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the LBMPDM dissector could crash. In addition, a remote attacker could write arbitrary data to any memory locations before the packet-scoped memory. T… archsusedebian
CVE-2018-18358 critical 9.5 multiple issues in chromium archdebian
CVE-2018-17473 critical 9.5 multiple issues in chromium arch
CVE-2018-18337 critical 9.5 multiple issues in chromium archdebian
CVE-2018-5125 critical 9.5 Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploit… archsusedebian
CVE-2018-18497 critical 9.5 Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the URL field is used within the extension to load multiple pages as a single argumen… archsusedebian
CVE-2018-18343 critical 9.5 multiple issues in chromium archdebian
CVE-2018-20346 critical 9.5 SQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and resultant buffer overflow) for FTS3 queries that occur after crafted changes to FTS3 shadow tables, allow… archdebiansuse
CVE-2018-12398 critical 9.5 By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy (CSP). This vulnerability affects Firefox < 63. archdebian
CVE-2018-12396 critical 9.5 A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites w… archsusedebian
CVE-2018-5155 critical 9.5 A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, … archsusedebian
CVE-2018-18348 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18357 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18352 critical 9.5 multiple issues in chromium archdebian
CVE-2018-17466 critical 9.5 multiple issues in chromium archsusedebian
CVE-2018-18356 critical 9.5 multiple issues in chromium archdebiansuse
CVE-2018-18350 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18359 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18502 critical 9.5 Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of… archsusedebian
CVE-2018-5179 critical 9.5 multiple issues in chromium arch
CVE-2018-15688 critical 9.5 multiple issues in systemd archsusedebian
CVE-2018-5180 critical 9.5 A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash, the vulnerability is limited because the memory is freed and reused in a brief… archdebian
CVE-2018-5182 critical 9.5 If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specified local file will be opened. This is contrary to policy a… archdebian
CVE-2018-15687 critical 9.5 multiple issues in systemd susedebianarch
CVE-2018-18339 critical 9.5 multiple issues in chromium archdebian
CVE-2018-18342 critical 9.5 multiple issues in chromium archdebian
CVE-2018-6111 critical 9.5 multiple issues in chromium arch
CVE-2018-6103 critical 9.5 multiple issues in chromium arch
CVE-2018-6108 critical 9.5 multiple issues in chromium arch
CVE-2018-6105 critical 9.5 multiple issues in chromium arch
CVE-2018-17477 critical 9.5 multiple issues in chromium arch
CVE-2018-17464 critical 9.5 multiple issues in chromium arch