Browse CVEs

MEDIUM 5.5 CVE-2018-18438 Qemu has integer overflows because IOReadHandler and its associated functions use a signed integer data type for a size value. Enterprise Linux Patch available Fix from $1,6002018-10-19 CRITICAL 9.8 CVE-2018-5156 A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream … Enterprise Linux Desktop Mitigation only Fix from $2,3002018-10-18 CRITICAL 9.1 CVE-2018-12387EPSS 10% A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by… Enterprise Linux Desktop Patch available Fix from $2,3002018-10-18 HIGH 8.1 CVE-2018-12386EPSS 13% A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code … Enterprise Linux Desktop Patch available Fix from $1,9502018-10-18 HIGH 7.0 CVE-2018-12385 A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile director… Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 CRITICAL 9.8 CVE-2018-12378 A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to… Enterprise Linux Desktop Mitigation only Fix from $2,3002018-10-18 HIGH 7.8 CVE-2018-12379 When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a pote… Enterprise Linux Desktop 60.2.0 / 62.0+ Fix from $1,9502018-10-18 MEDIUM 5.5 CVE-2018-12383 If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is… Enterprise Linux Desktop No fix yet Fix from $1,6002018-10-18 CRITICAL 9.8 CVE-2018-12376 Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enoug… Enterprise Linux Desktop Mitigation only Fix from $2,3002018-10-18 CRITICAL 9.8 CVE-2018-12377 A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted whi… Enterprise Linux Desktop Mitigation only Fix from $2,3002018-10-18 MEDIUM 6.5 CVE-2018-12373 dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerability affect… Enterprise Linux 52.9.0+ Fix from $1,6002018-10-18 MEDIUM 6.5 CVE-2018-12372 Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability a… Enterprise Linux 52.9.0+ Fix from $1,6002018-10-18 HIGH 8.8 CVE-2018-12364 NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect t… Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 MEDIUM 6.5 CVE-2018-12365 A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or inter… Enterprise Linux Desktop Mitigation only Fix from $1,6002018-10-18 MEDIUM 6.5 CVE-2018-12366 An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak p… Enterprise Linux Desktop Mitigation only Fix from $1,6002018-10-18 HIGH 8.8 CVE-2018-12362 An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentia… Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 HIGH 8.8 CVE-2018-12363 A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that hel… Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 HIGH 8.8 CVE-2018-12359 A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be … Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 HIGH 8.8 CVE-2018-12360 A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This resu… Enterprise Linux Desktop Mitigation only Fix from $1,9502018-10-18 MEDIUM 5.3 CVE-2018-3214EPSS 7% Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). Supported versions that are affected are J… Satellite Patch available Fix from $1,6002018-10-17 CRITICAL 9.0 CVE-2018-3183 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). Supported versions that are affected a… Satellite Patch available Fix from $2,3002018-10-17 MEDIUM 5.6 CVE-2018-3180 Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Ja… Satellite Patch available Fix from $1,6002018-10-17 HIGH 8.3 CVE-2018-3169 Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE:… Satellite Patch available Fix from $1,9502018-10-17 HIGH 8.3 CVE-2018-3149EPSS 7% Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Ja… Satellite Patch available Fix from $1,9502018-10-17 CRITICAL 9.8 CVE-2018-14649EPSS 12% It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by sett… Enterprise Linux Desktop Patch available Fix from $2,3002018-10-09 HIGH 8.8 CVE-2018-1000805 Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in… Ansible Tower Patch available Fix from $1,9502018-10-08 MEDIUM 5.0 CVE-2018-14650 It was discovered that sos-collector does not properly set the default permissions of newly created files, making all files created by the tool reada… Enterprise Linux Desktop Patch available Fix from $1,6002018-09-27 HIGH 7.5 CVE-2018-15967EPSS 8% Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation could lead to information discl… Enterprise Linux Desktop after 31.0.0.108 Fix from $1,9502018-09-25 HIGH 7.5 CVE-2018-17205 An issue was discovered in Open vSwitch (OvS) 2.7.x through 2.7.6, affecting ofproto_rule_insert__ in ofproto/ofproto.c. During bundle commit, flows … Openstack after 2.7.6 Fix from $1,9502018-09-19 MEDIUM 5.3 CVE-2018-14642 An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flus… Undertow Patch available Fix from $1,6002018-09-18