2018 CVEs (page 100)
Page 100 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-14072 | High | 7.5 | 2018-07-15 | libsixel 1.8.1 has a memory leak in sixel_decoder_decode in decoder.c, image_buffer_resize in fromsixel.c, and sixel_decode_raw in fromsixel.c. |
CVE-2018-14069 | High | 8.8 | 2018-07-15 | An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add a user account via admin.php?m=Admin&c=member&a=add. |
CVE-2018-14068 | High | 8.8 | 2018-07-15 | An issue was discovered in SRCMS V2.3.1. There is a CSRF vulnerability that can add an admin account via admin.php?m=Admin&c=manager&a=add. |
CVE-2018-14066 | Critical | 9.8 | 2018-07-15 | The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL injection. One consequenc… |
CVE-2018-14065 | Critical | 9.8 | 2018-07-15 | XMLReader.php in PHPOffice Common before 0.2.9 allows XXE. |
CVE-2018-14064 | Critical | 9.8 | 2018-07-15 | The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80. |
CVE-2018-14063 | Critical | 9.8 | 2018-07-15 | The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an integer overflow. |
CVE-2018-14060 | Critical | 9.8 | 2018-07-15 | OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to… |
CVE-2018-14010 | Critical | 9.8 | 2018-07-15 | OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15, and R3D before 2… |
CVE-2018-14056 | Medium | 5.3 | 2018-07-15 | ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories. |
CVE-2018-14055 | Medium | 6.5 | 2018-07-15 | ZNC before 1.7.1-rc1 does not properly validate untrusted lines coming from the network, allowing a non-admin user to escalate his privilege and inject rogue v… |
CVE-2018-10875 | High | 7.8 | 2018-07-13 | A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under th… |
CVE-2018-8847 | Critical | 9.8 | 2018-07-13 | Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution. |
CVE-2018-10631 | Medium | 6.3 | 2018-07-13 | The 8840 Clinician Programmer executes the application program from the 8870 Application Card. An attacker with physical access to an 8870 Application Card and… |
CVE-2018-1000211 | High | 7.5 | 2018-07-13 | Doorkeeper version 4.2.0 and later contains a Incorrect Access Control vulnerability in Token revocation API's authorized method that can result in Access toke… |
CVE-2018-1000210 | High | 7.8 | 2018-07-13 | YamlDotNet version 4.3.2 and earlier contains a Insecure Direct Object Reference vulnerability in The default behavior of Deserializer.Deserialize() will deser… |
CVE-2018-1000209 | High | 8.8 | 2018-07-13 | Sensu, Inc. Sensu Core version Before version 1.4.2-3 contains a Insecure Permissions vulnerability in Sensu Core on Windows platforms that can result in Unpri… |
CVE-2018-1000208 | High | 7.5 | 2018-07-13 | MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. T… |
CVE-2018-1000207 | High | 7.2 | 2018-07-13 | MODX Revolution version <=2.6.4 contains a Incorrect Access Control vulnerability in Filtering user parameters before passing them into phpthumb class that can… |
CVE-2018-1000206 | High | 8.8 | 2018-07-13 | JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that can result in Classic CSRF attack allo… |
CVE-2018-7535 | High | 7.8 | 2018-07-13 | An issue was discovered in TotalAV v4.1.7. An unprivileged user could modify or overwrite all of the product's files because of weak permissions (Everyone:F) u… |
CVE-2018-14054 | Critical | 9.8 | 2018-07-13 | A double free exists in the MP4StringProperty class in mp4property.cpp in MP4v2 2.0.0. A dangling pointer is freed again in the destructor once an exception is… |
CVE-2018-1255 | Medium | 6.1 | 2018-07-13 | RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacke… |
CVE-2018-1245 | Critical | 9.0 | 2018-07-13 | RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains an authorization bypass vulnerability within the workflow architect component (A… |
CVE-2018-10098 | Medium | 5.5 | 2018-07-13 | In MicroWorld eScan Internet Security Suite (ISS) for Business 14.0.1400.2029, the driver econceal.sys allows a non-privileged user to send a 0x830020E0 IOCTL… |
CVE-2018-10018 | High | 8.8 | 2018-07-13 | The GDASPAMLib.AntiSpam ActiveX control ASK\GDASpam.dll in G DATA Total Security 25.4.0.3 has a buffer overflow via a long IsBlackListed argument. |
CVE-2018-9070 | Medium | 6.4 | 2018-07-13 | For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pressing a specific but… |
CVE-2018-9067 | High | 7.5 | 2018-07-13 | The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure… |
CVE-2018-14052 | Medium | 6.5 | 2018-07-13 | An issue has been found in libwav through 2017-04-20. It is a SEGV in the function apply_gain in wav_gain/wav_gain.c. |
CVE-2018-14051 | High | 7.5 | 2018-07-13 | The function wav_read in libwav.c in libwav through 2017-04-20 has an infinite loop. |
CVE-2018-14050 | Medium | 6.5 | 2018-07-13 | An issue has been found in libwav through 2017-04-20. It is a SEGV in the function wav_free in libwav.c. |
CVE-2018-14049 | Medium | 6.5 | 2018-07-13 | An issue has been found in libwav through 2017-04-20. It is a SEGV in the function print_info in wav_info/wav_info.c. |
CVE-2018-14048 | Medium | 6.5 | 2018-07-13 | An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image. |
CVE-2018-14047 | Medium | 5.5 | 2018-07-13 | An issue has been found in PNGwriter 0.7.0. It is a SEGV in pngwriter::readfromfile in pngwriter.cc. NOTE: there is a "Warning: PNGwriter was never designed fo… |
CVE-2018-14046 | High | 8.8 | 2018-07-13 | Exiv2 0.26 has a heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp. |
CVE-2018-14045 | High | 7.5 | 2018-07-13 | The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of… |
CVE-2018-14044 | High | 7.5 | 2018-07-13 | The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial o… |
CVE-2018-14043 | Critical | 9.8 | 2018-07-13 | mstdlib (aka the M Standard Library for C) 1.2.0 has incorrect file access control in situations where M_fs_perms_can_access attempts to delete an existing fil… |
CVE-2018-14042 | Medium | 6.1 | 2018-07-13 | In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip. |
CVE-2018-14041 | Medium | 6.1 | 2018-07-13 | In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy. |
CVE-2018-14040 | Medium | 6.1 | 2018-07-13 | In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute. |
CVE-2018-6969 | High | 7.0 | 2018-07-13 | VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to information… |
CVE-2018-14036 | Medium | 6.5 | 2018-07-13 | Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() i… |
CVE-2018-14035 | High | 8.8 | 2018-07-13 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5VM_memcpyvv in H5VM.c. |
CVE-2018-14034 | High | 8.8 | 2018-07-13 | An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5O_pline_reset in H5Opline.c. |
CVE-2018-14033 | High | 8.8 | 2018-07-13 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5O_layout_decode in H5Olayout.c, related to HDm… |
CVE-2018-14031 | High | 8.8 | 2018-07-13 | An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5T_copy in H5T.c. |
CVE-2018-14029 | High | 8.8 | 2018-07-13 | CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifying the account's em… |
CVE-2018-14017 | Medium | 5.5 | 2018-07-12 | The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read… |
CVE-2018-14016 | Medium | 5.5 | 2018-07-12 | The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and a… |
CVE-2018-14015 | Medium | 5.5 | 2018-07-12 | The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted… |
CVE-2018-14014 | High | 8.8 | 2018-07-12 | In waimai Super Cms 20150505, there is a CSRF vulnerability that can add an admin account via admin.php?m=Member&a=adminadd. |
CVE-2018-14012 | Critical | 9.8 | 2018-07-12 | WolfSight CMS 3.2 allows SQL injection via the PATH_INFO to the default URI. |
CVE-2018-5529 | High | 7.8 | 2018-07-12 | The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to… |
CVE-2018-13796 | Medium | 6.5 | 2018-07-12 | An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site. |
CVE-2018-13458 | Medium | 5.5 | 2018-07-12 | qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condit… |
CVE-2018-13457 | Medium | 5.5 | 2018-07-12 | qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condit… |
CVE-2018-13441 | Medium | 5.5 | 2018-07-12 | qh_help in Nagios Core version 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attacker to cause a local denial-of-service… |
CVE-2018-12981 | Medium | 5.4 | 2018-07-12 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability can be exploited by authenticated and… |
CVE-2018-12980 | High | 8.8 | 2018-07-12 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. The vulnerability allows an authenticated user to uploa… |
CVE-2018-12979 | Medium | 6.5 | 2018-07-12 | An issue was discovered on WAGO e!DISPLAY 762-3000 through 762-3003 devices with firmware before FW 02. Weak permissions allow an authenticated user to overwri… |
CVE-2018-14009 | Critical | 9.8 | 2018-07-12 | Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689. |
CVE-2018-12463 | Critical | 9.8 | 2018-07-12 | An XML external entity (XXE) vulnerability in Fortify Software Security Center (SSC), version 17.1, 17.2, 18.1 allows remote unauthenticated users to read arbi… |
CVE-2018-14006 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract. An attacker could use i… |
CVE-2018-14005 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract. An attacker could use it to set… |
CVE-2018-14004 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract. An attacker could use… |
CVE-2018-14003 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract. An attacker could use it to set… |
CVE-2018-14002 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to set any us… |
CVE-2018-14001 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract. An attacker could use it to set an… |
CVE-2018-13836 | High | 7.5 | 2018-07-12 | An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set… |
CVE-2018-12540 | High | 8.8 | 2018-07-12 | In version from 3.0.0 to 3.5.2 of Eclipse Vert.x, the CSRFHandler do not assert that the XSRF Cookie matches the returned XSRF header/form parameter. This allo… |
CVE-2018-8024 | Medium | 5.4 | 2018-07-12 | In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and sta… |
CVE-2018-1334 | Medium | 4.7 | 2018-07-12 | In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark appli… |
CVE-2018-13999 | Medium | 4.8 | 2018-07-12 | Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator). |
CVE-2018-13998 | Medium | 4.8 | 2018-07-12 | ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users. |
CVE-2018-13997 | High | 7.5 | 2018-07-12 | Genann through 2018-07-08 has a SEGV in genann_run in genann.c. |
CVE-2018-13996 | Critical | 9.8 | 2018-07-12 | Genann through 2018-07-08 has a stack-based buffer over-read in genann_train in genann.c. |
CVE-2018-10895 | Critical | 9.3 | 2018-07-12 | qutebrowser before version 1.4.1 is vulnerable to a cross-site request forgery flaw that allows websites to access 'qute://*' URLs. A malicious website could e… |
CVE-2018-11049 | High | 7.3 | 2018-07-11 | RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG releases have an uncontrolled search vulnerability. The installation scrip… |
CVE-2018-11045 | Medium | 5.9 | 2018-07-11 | Pivotal Operations Manager, versions 2.1 prior to 2.1.6 and 2.0 prior to 2.0.15 and 1.12 prior to 1.12.22, contains a static Linux Random Number Generator (LRN… |
CVE-2018-0042 | Critical | 9.8 | 2018-07-11 | Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability. |
CVE-2018-0041 | Critical | 9.8 | 2018-07-11 | Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network b… |
CVE-2018-0040 | Critical | 9.8 | 2018-07-11 | Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network… |
CVE-2018-0039 | Medium | 6.5 | 2018-07-11 | Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials a… |
CVE-2018-0038 | Critical | 9.8 | 2018-07-11 | Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials… |
CVE-2018-0037 | Critical | 9.8 | 2018-07-11 | Junos OS routing protocol daemon (RPD) process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages… |
CVE-2018-0035 | Medium | 4.4 | 2018-07-11 | QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been… |
CVE-2018-0034 | Medium | 5.3 | 2018-07-11 | A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted… |
CVE-2018-0032 | High | 7.5 | 2018-07-11 | The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in… |
CVE-2018-0031 | Medium | 5.3 | 2018-07-11 | Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet… |
CVE-2018-0030 | High | 7.5 | 2018-07-11 | Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS… |
CVE-2018-0029 | Medium | 5.7 | 2018-07-11 | While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash a… |
CVE-2018-0027 | High | 7.5 | 2018-07-11 | Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon (RPD) to hang or crash. When RPD is unavailable, routing updates cann… |
CVE-2018-0026 | Medium | 4.7 | 2018-07-11 | After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: us… |
CVE-2018-0025 | Medium | 6.1 | 2018-07-11 | When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP… |
CVE-2018-0024 | High | 7.8 | 2018-07-11 | An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full contr… |
CVE-2018-10635 | Critical | 9.8 | 2018-07-11 | In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the cod… |
CVE-2018-10633 | Critical | 9.8 | 2018-07-11 | Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow an attacker to reset passwords for the c… |
CVE-2018-10232 | Medium | 6.5 | 2018-07-11 | Cross-site request forgery (CSRF) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to hijack the authent… |
CVE-2018-10231 | Medium | 6.1 | 2018-07-11 | Cross-site scripting (XSS) vulnerability in TOPdesk before 8.05.017 (June 2018 version) and before 5.7.SR9 allows remote attackers to inject arbitrary web scri… |