CVE-2018-5748
- EPSS 1.63%
- Published 25.01.2018 16:29:00
- Last modified 21.11.2024 04:09:18
qemu/qemu_monitor.c in libvirt allows attackers to cause a denial of service (memory consumption) via a large QEMU reply.
CVE-2018-1000007
- EPSS 2.93%
- Published 24.01.2018 22:29:00
- Last modified 21.11.2024 03:39:24
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow r...
- EPSS 0.09%
- Published 23.01.2018 18:29:00
- Last modified 21.11.2024 04:09:09
The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
CVE-2018-5950
- EPSS 2.43%
- Published 23.01.2018 16:29:01
- Last modified 21.11.2024 04:09:44
Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbitrary web script or HTML via a user-options URL.
CVE-2018-2663
- EPSS 0.11%
- Published 18.01.2018 02:29:22
- Last modified 21.11.2024 04:04:11
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploit...
CVE-2018-2665
- EPSS 0.41%
- Published 18.01.2018 02:29:22
- Last modified 21.11.2024 04:04:11
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged at...
CVE-2018-2668
- EPSS 0.31%
- Published 18.01.2018 02:29:22
- Last modified 21.11.2024 04:04:11
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged at...
CVE-2018-2677
- EPSS 0.11%
- Published 18.01.2018 02:29:22
- Last modified 21.11.2024 04:04:13
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthen...
CVE-2018-2678
- EPSS 0.11%
- Published 18.01.2018 02:29:22
- Last modified 21.11.2024 04:04:13
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Easily exploitable ...
CVE-2018-2622
- EPSS 0.31%
- Published 18.01.2018 02:29:20
- Last modified 21.11.2024 04:04:04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker...