PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2018 document archive · 28

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,627 documents · Identifier year 2018 · 28 / 33

  1. CVE-2018-5117Mozilla: URL spoofing with right-to-left text aligned left-to-right (MFSA 2018-03)
  2. CVE-2018-5104Mozilla: Use-after-free during font face manipulation (MFSA 2018-03)
  3. CVE-2018-5103Mozilla: Use-after-free during mouse event handling (MFSA 2018-03)
  4. CVE-2018-5102Mozilla: Use-after-free in HTML media elements (MFSA 2018-03)
  5. CVE-2018-5099Mozilla: Use-after-free with widget listener (MFSA 2018-03)
  6. CVE-2018-5098Mozilla: Use-after-free while manipulating form input elements (MFSA 2018-03)
  7. CVE-2018-5097Mozilla: Use-after-free when source document is manipulated during XSLT (MFSA 2018-03)
  8. CVE-2018-5096Mozilla: Use-after-free while editing form elements (MFSA 2018-03)
  9. CVE-2018-5095Mozilla: Integer overflow in Skia library during edge builder allocation (MFSA 2018-03)
  10. CVE-2018-5091Mozilla: Use-after-free with DTMF timers (MFSA 2018-03)
  11. CVE-2018-5089Mozilla: Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6 (MFSA 2018-03)
  12. CVE-2018-4868exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp
  13. CVE-2018-4700cups: Predictable session cookie breaks CSRF protection
  14. CVE-2018-4300cups: Session cookie generated by the CUPS web interface is easy to guess
  15. CVE-2018-4204webkitgtk: memory corruption processing maliciously crafted web content
  16. CVE-2018-4200webkitgtk: memory corruption processing maliciously crafted web content
  17. CVE-2018-4183cups: Sandbox bypass due to profile misconfiguration
  18. CVE-2018-4182cups: Sandbox bypass due to insecure error handling
  19. CVE-2018-4181cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root
  20. CVE-2018-4180cups: Local privilege escalation to root due to insecure environment variable handling
  21. CVE-2018-4121webkitgtk: memory corruption processing maliciously crafted web content
  22. CVE-2018-3849cfitsio: Stack-based buffer overflow in ffghtb() allows for potential code execution
  23. CVE-2018-3848cfitsio: Stack-based buffer overflow in ffghbn() allows for potential code execution
  24. CVE-2018-3846cfitsio: Unsafe use of sprintf() can allow a remote unauthenticated attacker to execute arbitrary code
  25. CVE-2018-3750nodejs-deep-extend: Prototype pollution can allow attackers to modify object properties
  26. CVE-2018-3739nodejs-https-proxy-agent: Unsanitized options passed to Buffer() allow for denial of service
  27. CVE-2018-3728hoek: Prototype pollution in utilities function
  28. CVE-2018-3693Kernel: speculative bounds check bypass store
  29. CVE-2018-3665Kernel: FPU state information leakage via lazy FPU restore
  30. CVE-2018-3646Kernel: hw: cpu: L1 terminal fault (L1TF)
  31. CVE-2018-3640hw: cpu: speculative register load
  32. CVE-2018-3639hw: cpu: speculative store bypass
  33. CVE-2018-3630ovmf: Logic error in FV parsing in MdeModulePkg\Core\Pei\FwVol\FwVol.c
  34. CVE-2018-3620Kernel: hw: cpu: L1 terminal fault (L1TF)
  35. CVE-2018-3613edk2: Logic error in MdeModulePkg in EDK II firmware allows for privilege escalation by authenticated users
  36. CVE-2018-3286mysql: Server: Security: Privileges unspecified vulnerability (CPU Oct 2018)
  37. CVE-2018-3285mysql: Server: Windows unspecified vulnerability (CPU Oct 2018)
  38. CVE-2018-3284mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
  39. CVE-2018-3283mysql: Server: Logging unspecified vulnerability (CPU Oct 2018)
  40. CVE-2018-3282mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)
  41. CVE-2018-3280mysql: Server: JSON unspecified vulnerability (CPU Oct 2018)
  42. CVE-2018-3279mysql: Server: Security: Roles unspecified vulnerability (CPU Oct 2018)
  43. CVE-2018-3278mysql: Server: RBR unspecified vulnerability (CPU Oct 2018)
  44. CVE-2018-3277mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
  45. CVE-2018-3276mysql: Server: Memcached unspecified vulnerability (CPU Oct 2018)
  46. CVE-2018-3258mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)
  47. CVE-2018-3251mysql: InnoDB unspecified vulnerability (CPU Oct 2018)
  48. CVE-2018-3247mysql: Server: Merge unspecified vulnerability (CPU Oct 2018)
  49. CVE-2018-3214OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)
  50. CVE-2018-3212mysql: Server: Information Schema unspecified vulnerability (CPU Oct 2018)
CVE 2018 document archive — Page 28 | PulseLinux