Canonical
Page 21 of 44 — Canonical CVEs from a corpus of 4332, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5185 | Medium | 6.5 | 2018-06-11 | Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. |
CVE-2018-5184 | High | 7.5 | 2018-06-11 | Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. |
CVE-2018-5183 | Critical | 9.8 | 2018-06-11 | Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes du… |
CVE-2018-5182 | High | 7.5 | 2018-06-11 | If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specified local file will… |
CVE-2018-5181 | High | 7.5 | 2018-06-11 | If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresp… |
CVE-2018-5180 | High | 7.5 | 2018-06-11 | A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash, the vulnerability is limited because t… |
CVE-2018-5178 | High | 8.1 | 2018-06-11 | A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the us… |
CVE-2018-5177 | High | 7.5 | 2018-06-11 | A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer overflow and crash… |
CVE-2018-5176 | Medium | 6.1 | 2018-06-11 | The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScri… |
CVE-2018-5175 | Medium | 6.1 | 2018-06-11 | A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dynamic'". If a target website contains an… |
CVE-2018-5173 | Medium | 5.3 | 2018-06-11 | The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to obscu… |
CVE-2018-5172 | Medium | 4.3 | 2018-06-11 | The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF… |
CVE-2018-5170 | Medium | 4.3 | 2018-06-11 | It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is… |
CVE-2018-5169 | Medium | 6.5 | 2018-06-11 | If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a normally-… |
CVE-2018-5168 | Medium | 5.3 | 2018-06-11 | Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a m… |
CVE-2018-5167 | Medium | 4.3 | 2018-06-11 | The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:" links as active, clickable hyperlinks i… |
CVE-2018-5166 | High | 7.5 | 2018-06-11 | WebExtensions can use request redirection and a "filterReponseData" filter to bypass host permission settings to redirect network traffic and access content fr… |
CVE-2018-5164 | Medium | 6.1 | 2018-06-11 | Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME type. This could allow… |
CVE-2018-5163 | High | 8.1 | 2018-06-11 | If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources st… |
CVE-2018-5162 | High | 7.5 | 2018-06-11 | Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird… |
CVE-2018-5161 | Medium | 4.3 | 2018-06-11 | Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 5… |
CVE-2018-5160 | High | 7.5 | 2018-06-11 | WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder usin… |
CVE-2018-5159 | Critical | 9.8 | 2018-06-11 | An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr… |
CVE-2018-5158 | High | 8.8 | 2018-06-11 | The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This Ja… |
CVE-2018-5157 | High | 7.5 | 2018-06-11 | Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to… |
CVE-2018-5155 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vu… |
CVE-2018-5154 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. T… |
CVE-2018-5153 | High | 7.5 | 2018-06-11 | If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted. This can result in an out-of-bounds read with the r… |
CVE-2018-5152 | Medium | 6.5 | 2018-06-11 | WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the si… |
CVE-2018-5151 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5150 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume… |
CVE-2018-5148 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. Th… |
CVE-2018-5146 | High | 8.8 | 2018-06-11 | An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox… |
CVE-2018-5145 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these… |
CVE-2018-5144 | High | 7.3 | 2018-06-11 | An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox… |
CVE-2018-5143 | Medium | 6.1 | 2018-06-11 | URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scripting (XSS) attacks, but if a tab chara… |
CVE-2018-5142 | Medium | 5.3 | 2018-06-11 | If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the… |
CVE-2018-5141 | High | 8.2 | 2018-06-11 | A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This coul… |
CVE-2018-5140 | Medium | 5.3 | 2018-06-11 | Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for informa… |
CVE-2018-5137 | High | 7.5 | 2018-06-11 | A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a malicious… |
CVE-2018-5136 | High | 7.5 | 2018-06-11 | A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policy. This vulnerabilit… |
CVE-2018-5133 | Medium | 6.5 | 2018-06-11 | If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be e… |
CVE-2018-5132 | Medium | 6.5 | 2018-06-11 | The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebE… |
CVE-2018-5131 | Medium | 5.9 | 2018-06-11 | Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instea… |
CVE-2018-5130 | High | 8.8 | 2018-06-11 | When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulner… |
CVE-2018-5129 | High | 8.6 | 2018-06-11 | A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbo… |
CVE-2018-5128 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. This results in a potentially explo… |
CVE-2018-5127 | High | 8.8 | 2018-06-11 | A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability… |
CVE-2018-5126 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5125 | High | 8.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2018-5122 | Critical | 9.8 | 2018-06-11 | A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result in an out-of-bounds… |
CVE-2018-5119 | Medium | 5.3 | 2018-06-11 | The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin content by a site. This could allow access… |
CVE-2018-5118 | Medium | 5.3 | 2018-06-11 | The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discover… |
CVE-2018-5117 | Medium | 5.3 | 2018-06-11 | If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed U… |
CVE-2018-5116 | Critical | 9.8 | 2018-06-11 | WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions… |
CVE-2018-5115 | High | 7.5 | 2018-06-11 | If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground pa… |
CVE-2018-5114 | Medium | 5.3 | 2018-06-11 | If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that document is closed… |
CVE-2018-5113 | High | 7.5 | 2018-06-11 | The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced… |
CVE-2018-5112 | High | 7.5 | 2018-06-11 | Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was no… |
CVE-2018-5111 | Medium | 6.5 | 2018-06-11 | When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the o… |
CVE-2018-5109 | Medium | 5.3 | 2018-06-11 | An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the… |
CVE-2018-5108 | Medium | 4.3 | 2018-06-11 | A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data to be passed between the private brows… |
CVE-2018-5107 | Medium | 5.3 | 2018-06-11 | The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions. The printing process requ… |
CVE-2018-5106 | Medium | 5.3 | 2018-06-11 | Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these too… |
CVE-2018-5105 | High | 7.8 | 2018-06-11 | WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user… |
CVE-2018-5104 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable cra… |
CVE-2018-5103 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash… |
CVE-2018-5102 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerabi… |
CVE-2018-5101 | High | 7.5 | 2018-06-11 | A use-after-free vulnerability can occur when manipulating floating "first-letter" style elements, resulting in a potentially exploitable crash. This vulnerabi… |
CVE-2018-5100 | High | 7.5 | 2018-06-11 | A use-after-free vulnerability can occur when arguments passed to the "IsPotentiallyScrollable" function are freed while still in use by scripts. This results… |
CVE-2018-5099 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in… |
CVE-2018-5098 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially explo… |
CVE-2018-5097 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the… |
CVE-2018-5095 | Critical | 9.8 | 2018-06-11 | An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the u… |
CVE-2018-5094 | High | 7.5 | 2018-06-11 | A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now uninitialize… |
CVE-2018-5093 | High | 7.5 | 2018-06-11 | A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash. This vulnerability af… |
CVE-2018-5092 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while canc… |
CVE-2018-5091 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This… |
CVE-2018-5090 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 57. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5089 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-7829 | Medium | 5.3 | 2018-06-11 | It is possible to spoof the sender's email address and display an arbitrary sender address to the email recipient. The real sender's address is not displayed i… |
CVE-2017-7826 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2017-7810 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2018-10360 | Medium | 6.5 | 2018-06-11 | The do_core_note function in readelf.c in libmagic.a in file 5.33 allows remote attackers to cause a denial of service (out-of-bounds read and application cras… |
CVE-2018-12085 | High | 8.8 | 2018-06-09 | Liblouis 3.6.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. |
CVE-2018-12020 | High | 7.5 | 2018-06-08 | mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output… |
CVE-2018-4246 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4233 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4232 | Medium | 4.3 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4222 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4218 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4200 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4199 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-4190 | High | 8.8 | 2018-06-08 | An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTu… |
CVE-2018-12015 | High | 7.5 | 2018-06-07 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, vi… |
CVE-2018-11685 | High | 8.8 | 2018-06-04 | Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c. |
CVE-2018-11684 | High | 8.8 | 2018-06-04 | Liblouis 3.5.0 has a stack-based Buffer Overflow in the function includeFile in compileTranslationTable.c. |
CVE-2018-11683 | High | 8.8 | 2018-06-04 | Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c, a different vulnerability than CVE-2018-11440. |
CVE-2016-1000338 | High | 7.5 | 2018-06-01 | In Bouncy Castle JCE Provider version 1.55 and earlier the DSA does not fully validate ASN.1 encoding of signature on verification. It is possible to inject ex… |
CVE-2018-11656 | Medium | 6.5 | 2018-06-01 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denia… |