68509 matches found
CVE-2018-9375
In multiple functions of UserDictionaryProvider.java, there is a possible way to add and delete words in the user dictionary due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2018-9383
creationtimestamp| type| source ---|---|--- 2025-01-17 23:05:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113846199165111249 2025-01-17 23:15:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwfnjaew2f 2025-01-17 23:43:55+00:00| seen|...
CVE-2018-9384
In multiple locations, there is a possible way to bypass KASLR due to an unusual root cause. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2018-9383
In asn1berdecoder of asn1decoder.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
OESA-2025-1051 enscript security update
GNU enscript is a computer program that converts text files to PostScript, RTF, or HTML formats. If no input files are given, enscript processes standard input. Enscript can be extended to handle different output media and it has many options which can be used to customize print-outs. Security...
perl-Compress-Raw-Zlib-2.213-1.1 on GA media (moderate)
perl-Compress-Raw-Zlib-2.213-1.1 on GA media Announcement ID: openSUSE-SU-2025:14656-1 Rating: moderate Cross-References: CVE-2016-9843 CVE-2018-25032 CVSS scores: CVE-2018-25032 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves 2...
CVE-2018-25108
An unauthenticated remote attacker can cause a DoS in the controller due to uncontrolled resource consumption...
CVE-2018-25108
creationtimestamp| type| source ---|---|--- 2025-01-16 10:21:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113837532228530467 2025-01-16 10:55:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1936 2025-01-16 11:15:28+00:00| seen|...
Ubuntu: Security Advisory (USN-7203-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Advisory ROSA-SA-2025-2553
Software: rsync 3.1.2 OS: rosa-server79 packageevrstring: rsync-3.1.2-12.0.1.res7 CVE-ID: CVE-2017-16548 BDU-ID: 2021-01395 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the receivexattr function in xattrs.c of the Rsync file transfer and synchronization utility is related to the lack of a check f...
Advisory ROSA-SA-2025-2549
Software: ghostscript 9.25 OS: rosa-server79 packageevrstring: ghostscript-9.25-5.0.3.res7 CVE-ID: CVE-2018-19478 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in Artifex Ghostscript allows an attacker to run a lengthy calculation when processing a PDF file. CVE-STATUS: The vulnerabili...
CVE-2018-10195 affecting package lrzsz 0.12.20-50
CVE-2018-10195 affecting package lrzsz 0.12.20-50. No patch is available currently...
CVE-2018-7263 affecting package libmad 0.15.1b-30
CVE-2018-7263 affecting package libmad 0.15.1b-30. This CVE either no longer is or was never applicable...
CVE-2018-14628 affecting package samba 4.12.5-7
CVE-2018-14628 affecting package samba 4.12.5-7. No patch is available currently...
CVE-2018-20225 affecting package python-pip 19.2-2
CVE-2018-20225 affecting package python-pip 19.2-2. No patch is available currently...
CVE-2018-25032 affecting package openjdk8 for versions less than 1.8.0.332-2
CVE-2018-25032 affecting package openjdk8 for versions less than 1.8.0.332-2. A patched version of the package is available...
CVE-2018-25032 affecting package grpc for versions less than 1.35.0-4
CVE-2018-25032 affecting package grpc for versions less than 1.35.0-4. A patched version of the package is available...
CVE-2018-14040 affecting package boost 1.66.0-4
CVE-2018-14040 affecting package boost 1.66.0-4. This CVE either no longer is or was never applicable...