CVE 2018 document archive · 27

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 27 / 33

  1. CVE-2018-5207irssi: Out-of-bounds read when using an incomplete variable argument
  2. CVE-2018-5206irssi: NULL pointer dereference when channel topic is set without specifying sender
  3. CVE-2018-5205irssi: Out-of-bounds read when using incomplete escape codes
  4. CVE-2018-5188Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9
  5. CVE-2018-5187Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  6. CVE-2018-5186Mozilla: Memory safety bugs fixed in Firefox 61
  7. CVE-2018-5185Mozilla: Leaking plaintext through HTML forms
  8. CVE-2018-5184Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack
  9. CVE-2018-5183Mozilla: Backport critical security fixes in Skia
  10. CVE-2018-5182Mozilla: Local file can be displayed from hyperlink dragged and dropped on addressbar
  11. CVE-2018-5181Mozilla: Local file can be displayed in noopener tab through drag and drop of hyperlink
  12. CVE-2018-5180Mozilla: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  13. CVE-2018-5178Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension
  14. CVE-2018-5177Mozilla: Buffer overflow in XSLT during number formatting
  15. CVE-2018-5176Mozilla: JSON Viewer script injection
  16. CVE-2018-5175Mozilla: Universal CSP bypass on sites using strict-dynamic in their policies
  17. CVE-2018-5174Mozilla: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update
  18. CVE-2018-5173Mozilla: File name spoofing of Downloads panel with Unicode characters
  19. CVE-2018-5172Mozilla: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer
  20. CVE-2018-5170Mozilla: Filename spoofing for external attachments
  21. CVE-2018-5169Mozilla: Dragging and dropping link text onto home button can set home page to include chrome pages
  22. CVE-2018-5168Mozilla: Lightweight themes can be installed without user interaction
  23. CVE-2018-5167Mozilla: Improper linkification of chrome: and javascript: content in web console and JavaScript debugger
  24. CVE-2018-5166Mozilla: WebExtension host permission bypass through filterReponseData
  25. CVE-2018-5165Mozilla: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox
  26. CVE-2018-5164Mozilla: CSP not applied to all multipart content sent with multipart/x-mixed-replace
  27. CVE-2018-5163Mozilla: Replacing cached data in JavaScript Start-up Bytecode Cache
  28. CVE-2018-5162Mozilla: Encrypted mail leaks plaintext through src attribute
  29. CVE-2018-5161Mozilla: Hang via malformed headers
  30. CVE-2018-5160Mozilla: Uninitialized memory use by WebRTC encoder
  31. CVE-2018-5159Mozilla: Integer overflow and out-of-bounds write in Skia
  32. CVE-2018-5158Mozilla: Malicious PDF can inject JavaScript into PDF Viewer
  33. CVE-2018-5157Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files
  34. CVE-2018-5156Mozilla: Media recorder segmentation fault when track type is changed during capture
  35. CVE-2018-5155Mozilla: Use-after-free with SVG animations and text paths
  36. CVE-2018-5154Mozilla: Use-after-free with SVG animations and clip paths
  37. CVE-2018-5153Mozilla: Out-of-bounds read in mixed content websocket messages
  38. CVE-2018-5152Mozilla: WebExtensions information leak through webRequest API
  39. CVE-2018-5151Mozilla: Memory safety bugs fixed in Firefox 60
  40. CVE-2018-5150Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
  41. CVE-2018-5148firefox: Use-after-free in compositor potentially allows code execution
  42. CVE-2018-5146Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)
  43. CVE-2018-5145Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)
  44. CVE-2018-5144Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)
  45. CVE-2018-5131Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)
  46. CVE-2018-5130Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07)
  47. CVE-2018-5129Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07)
  48. CVE-2018-5127Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07)
  49. CVE-2018-5125Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07)
  50. CVE-2018-5124firefox: Unsanitized output in browser UI can lead to arbitrary code execution
CVE 2018 document archive — Page 27 | PulseLinux