Filtered by vendor Subscriptions
Total 322228 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-15870 1 Libming 1 Libming 2024-11-21 N/A
An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
CVE-2018-15869 1 Hashicorp 1 Packer 2024-11-21 N/A
An Amazon Web Services (AWS) developer who does not specify the --owners flag when describing images via AWS CLI, and therefore not properly validating source software per AWS recommended security best practices, may unintentionally load an undesired and potentially malicious Amazon Machine Image (AMI) from the uncurated public community AMI catalog.
CVE-2018-15868 1 Chronoscan 1 Chronoscan 2024-11-21 N/A
SQL injection vulnerability in ChronoScan version 1.5.4.3 and earlier allows an unauthenticated attacker to execute arbitrary SQL commands via the wcr_machineid cookie.
CVE-2018-15865 1 Pulsesecure 1 Pulse Secure Desktop Client 2024-11-21 N/A
The Pulse Secure Desktop (macOS) has a Privilege Escalation Vulnerability.
CVE-2018-15864 3 Canonical, Redhat, Xkbcommon 4 Ubuntu Linux, Enterprise Linux, Libxkbcommon and 1 more 2024-11-21 N/A
Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.
CVE-2018-15863 3 Canonical, Redhat, Xkbcommon 4 Ubuntu Linux, Enterprise Linux, Libxkbcommon and 1 more 2024-11-21 N/A
Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.
CVE-2018-15862 3 Canonical, Redhat, Xkbcommon 4 Ubuntu Linux, Enterprise Linux, Libxkbcommon and 1 more 2024-11-21 N/A
Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.
CVE-2018-15861 3 Canonical, Redhat, Xkbcommon 4 Ubuntu Linux, Enterprise Linux, Libxkbcommon and 1 more 2024-11-21 N/A
Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
CVE-2018-15859 3 Canonical, Redhat, Xkbcommon 4 Ubuntu Linux, Enterprise Linux, Libxkbcommon and 1 more 2024-11-21 N/A
Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.
CVE-2018-15858 2 Canonical, Xkbcommon 3 Ubuntu Linux, Libxkbcommon, Xkbcommon 2024-11-21 N/A
Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file.
CVE-2018-15857 3 Canonical, Redhat, Xkbcommon 4 Ubuntu Linux, Enterprise Linux, Libxkbcommon and 1 more 2024-11-21 N/A
An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file.
CVE-2018-15856 3 Canonical, Redhat, Xkbcommon 3 Ubuntu Linux, Enterprise Linux, Xkbcommon 2024-11-21 N/A
An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
CVE-2018-15855 3 Canonical, Redhat, Xkbcommon Project 3 Ubuntu Linux, Enterprise Linux, Xkbcommon 2024-11-21 N/A
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled.
CVE-2018-15854 3 Canonical, Redhat, Xkbcommon Project 3 Ubuntu Linux, Enterprise Linux, Xkbcommon 2024-11-21 N/A
Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
CVE-2018-15853 3 Canonical, Redhat, Xkbcommon 4 Ubuntu Linux, Enterprise Linux, Libxkbcommon and 1 more 2024-11-21 N/A
Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.
CVE-2018-15852 1 Technicolor 2 Tc7200.20, Tc7200.20 Firmware 2024-11-21 N/A
Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions
CVE-2018-15851 1 Flexocms Project 1 Flexo Cms 2024-11-21 N/A
An issue was discovered in Flexo CMS v0.1.6. There is a CSRF vulnerability that can add an administrator via /admin/user/add.
CVE-2018-15850 1 Redaxo 1 Redaxo Cms 2024-11-21 N/A
An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.php?page=user.
CVE-2018-15849 1 Portfoliocms Project 1 Portfoliocms 2024-11-21 N/A
An issue was discovered in portfolioCMS 1.0.5. There is CSRF to update the website settings via admin/aboutus.php.
CVE-2018-15848 1 Portfoliocms Project 1 Portfoliocms 2024-11-21 N/A
An issue was discovered in portfolioCMS 1.0.5. There is CSRF to create new pages via admin/portfolio.php?newpage=true.