CVEs from 2018

2,883 normalized CVEs published or assigned in this year.

Total
2,883
critical
critical 238
high
high 329
medium
medium 259
low
low 39
% Critical
8.3%
% with KEV
3.1%
% with exploit
9.0%

Top products

  • core_i7 379
  • core_i5 375
  • core_i3 242
  • xeon_e5 82
  • xeon_e7 62
  • xeon_e3 58
  • xeon_gold 33
  • atom_z 30
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2018-5308 medium 5.5 PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-…
CVE-2018-12606 medium 5.5 multiple issues in gitlab
CVE-2018-5205 medium 5.5 When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.
CVE-2018-1125 medium 5.5 procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a stack-allocated string. When pgrep is comp…
CVE-2018-1000007 medium 5.5 libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the hos…
CVE-2018-6381 medium 5.5 In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk…
CVE-2018-1000035 medium 5.5 A heap-based buffer overflow exists in Info-Zip UnZip version <= 6.00 in the processing of password-protected archives that allows an attacker to perform a denial of service or to possibly achieve co…
CVE-2018-5207 medium 5.5 When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.
CVE-2018-20751 medium 5.5 An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject(…
CVE-2018-16866 medium 5.5 An out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Version…
CVE-2018-5736 medium 5.5 An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attempts several transfers of a slave zone in quick succession. …
CVE-2018-11255 medium 5.5 An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and applic…
CVE-2018-20846 medium 5.5 Out-of-bounds accesses in the functions pi_next_lrcp, pi_next_rlcp, pi_next_rpcl, pi_next_pcrl, pi_next_rpcl, and pi_next_cprl in openmj2/pi.c in OpenJPEG through 2.3.0 allow remote attackers to caus…
CVE-2018-19591 medium 5.5 In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related t…
CVE-2018-17478 medium 5.5 information disclosure in chromium
CVE-2018-6484 medium 5.5 In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of se…
CVE-2018-5783 medium 5.5 In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial…
CVE-2018-7727 medium 5.5 An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.
CVE-2018-6954 medium 5.5 systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local users to obtain ownership of arbitrary files via vectors involving creation of …
CVE-2018-20102 medium 5.5 denial of service in haproxy
CVE-2018-7548 medium 5.5 denial of service in zsh
CVE-2018-7549 medium 5.5 denial of service in zsh
CVE-2018-5737 medium 5.5 A problem with the implementation of the new serve-stale feature in BIND 9.12 can lead to an assertion failure in rbtdb.c, even when stale-answer-enable is off. Additionally, problematic interaction …
CVE-2018-1000121 medium 5.5 A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service
CVE-2018-1000122 medium 5.5 A buffer over-read exists in curl 7.20.0 to and including curl 7.58.0 in the RTSP+RTP handling code that allows an attacker to cause a denial of service or information leakage
CVE-2018-14626 medium 5.5 PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of ser…
CVE-2018-12982 medium 5.5 Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted file.
CVE-2018-14644 medium 5.5 An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DN…
CVE-2018-16855 medium 5.5 An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a pack…
CVE-2018-6541 medium 5.5 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could lever…
CVE-2018-20103 medium 5.5 denial of service in haproxy
CVE-2018-0739 medium 5.5 Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of …
CVE-2018-1126 medium 5.5 procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.
CVE-2018-19432 medium 5.5 An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service.
CVE-2018-5729 medium 5.5 MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to cause a denial of service (NULL pointer dereference) or bypass a DN container ch…
CVE-2018-6542 medium 5.5 In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
CVE-2018-8000 medium 5.5 multiple issues in podofo
CVE-2018-10779 medium 5.5 TIFFWriteScanline in tif_write.c in LibTIFF 3.8.2 has a heap-based buffer over-read, as demonstrated by bmp2tiff.
CVE-2018-6540 medium 5.5 In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c. Remote attackers could leverage this vulnerability to cause a…
CVE-2018-5296 medium 5.5 In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could leverage this vulnerability to cause a denial-of…
CVE-2018-20797 medium 5.5 An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPr…
CVE-2018-10195 medium 5.5 lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.
CVE-2018-16376 medium 5.5 An issue was discovered in OpenJPEG 2.3.0. A heap-based buffer overflow was discovered in the function t2_encode_packet in lib/openmj2/t2.c. The vulnerability causes an out-of-bounds write, which may…
CVE-2018-7726 medium 5.5 An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service …
CVE-2018-12983 medium 5.5 A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via …
CVE-2018-12607 medium 5.5 multiple issues in gitlab
CVE-2018-6869 medium 5.5 In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a den…
CVE-2018-17144 medium 5.5 Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitabl…
CVE-2018-5206 medium 5.5 When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.
CVE-2018-19661 medium 5.5 An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.
CVE-2018-5709 medium 5.5 An issue was discovered in MIT Kerberos 5 (aka krb5) through 1.16. There is a variable "dbentry->n_key_data" in kadmin/dbutil/dump.c that can store 16-bit data but unknowingly the developer has assig…
CVE-2018-25306 medium 5.5 5.5 1mo ago PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations. Attackers can trigger a segmen…
CVE-2018-25267 medium 5.5 5.5 1mo ago UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attacker…
CVE-2018-17828 medium 5.5 7mo ago RHSA-2020:1653: zziplib security update (Moderate)
CVE-2018-15209 medium 5.5 2y ago RHSA-2024:5079: libtiff security update (Moderate)
CVE-2018-25091 medium 5.5 3y ago RHSA-2024:2988: container-tools:rhel8 security update (Moderate)
CVE-2018-18624 medium 5.5 4y ago RHSA-2020:4682: grafana security, bug fix, and enhancement update (Moderate)
CVE-2018-7260 medium 5.5 4y ago Cross-site scripting (XSS) vulnerability in db_central_columns.php in phpMyAdmin before 4.7.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVE-2018-13258 medium 5.5 4y ago Mediawiki tarball is missing .htaccess files
CVE-2018-1000120 medium 5.5 4y ago A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.
CVE-2018-1999043 medium 5.5 4y ago Missing Release of Resource after Effective Lifetime in Jenkins
CVE-2018-0503 medium 5.5 4y ago Mediawiki Improper Privilege Management
CVE-2018-0505 medium 5.5 4y ago Mediawiki BotPassword can bypass CentralAuth's account lock
CVE-2018-14773 medium 5.5 4y ago An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises …
CVE-2018-14040 medium 5.5 4y ago RHSA-2020:4847: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update (Moderate)
CVE-2018-20847 medium 5.5 5y ago RHSA-2021:4251: openjpeg2 security update (Moderate)
CVE-2018-5785 medium 5.5 5y ago RHSA-2021:4251: openjpeg2 security update (Moderate)
CVE-2018-5727 medium 5.5 5y ago RHSA-2021:4251: openjpeg2 security update (Moderate)
CVE-2018-20845 medium 5.5 5y ago RHSA-2021:4251: openjpeg2 security update (Moderate)
CVE-2018-25014 medium 5.5 5y ago RHSA-2021:4231: libwebp security update (Moderate)
CVE-2018-25012 medium 5.5 5y ago RHSA-2021:4231: libwebp security update (Moderate)
CVE-2018-25009 medium 5.5 5y ago RHSA-2021:4231: libwebp security update (Moderate)
CVE-2018-25010 medium 5.5 5y ago RHSA-2021:4231: libwebp security update (Moderate)
CVE-2018-25013 medium 5.5 5y ago RHSA-2021:4231: libwebp security update (Moderate)
CVE-2018-21247 medium 5.5 5y ago An issue was discovered in LibVNCServer before 0.9.13. There is an information leak (of uninitialized memory contents) in the libvncclient/rfbproto.c ConnectToRFBRepeater function.
CVE-2018-17199 medium 5.5 5y ago In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessio…
CVE-2018-14462 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14464 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14465 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14461 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-10105 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-10103 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14467 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-16229 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-11805 medium 5.5 6y ago RHSA-2020:4625: spamassassin security update (Moderate)
CVE-2018-14463 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14466 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14468 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14469 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14470 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14879 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14880 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14881 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-14882 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-16227 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-16228 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-16452 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-16451 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-16300 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)
CVE-2018-16230 medium 5.5 6y ago RHSA-2020:4760: tcpdump security, bug fix, and enhancement update (Moderate)