2018 CVEs (page 107)
Page 107 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-3570 | High | 7.8 | 2018-07-06 | In the cpuidle driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, the list_for_each macro was no… |
CVE-2018-13410 | Critical | 9.8 | 2018-07-06 | Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or poss… |
CVE-2018-11304 | High | 7.8 | 2018-07-06 | Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android re… |
CVE-2018-5899 | High | 7.8 | 2018-07-06 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, whenever TDLS co… |
CVE-2018-5898 | High | 7.8 | 2018-07-06 | Integer overflow can occur in msm_pcm_adsp_stream_cmd_put() function if the user supplied data "param_length" goes beyond certain limit in Android releases fro… |
CVE-2018-5897 | High | 7.5 | 2018-07-06 | While reading the data from buffer in dci_process_ctrl_status() there can be buffer over-read problem if the len is not checked correctly in Android releases f… |
CVE-2018-5896 | High | 7.1 | 2018-07-06 | In Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-05, kernel panic may… |
CVE-2018-5895 | Medium | 5.5 | 2018-07-06 | Buffer over-read may happen in wma_process_utf_event() due to improper buffer length validation before writing into param_buf->num_wow_packet_buffer in Android… |
CVE-2018-5894 | Medium | 6.5 | 2018-07-06 | Improper Validation of Array Index in Multimedia While parsing an mp4 file in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds ac… |
CVE-2018-5893 | High | 7.8 | 2018-07-06 | While processing a message from firmware in htt_t2h_msg_handler_fast() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM… |
CVE-2018-5892 | High | 7.5 | 2018-07-06 | The Touch Pal application can collect user behavior data without awareness by the user in Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5891 | High | 8.4 | 2018-07-06 | While processing modem SSR after IMS is registered, the IMS data daemon is restarted but the ipc_dataHandle is no longer available. Consequently, the DPL threa… |
CVE-2018-5890 | High | 7.8 | 2018-07-06 | If the fdt_totalsize is reported as 0 for the current device tree, it bypasses an error check for a valid device tree in Android releases from CAF using the li… |
CVE-2018-5889 | High | 7.8 | 2018-07-06 | While processing a compressed kernel image, a buffer overflow can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MS… |
CVE-2018-5888 | High | 7.8 | 2018-07-06 | While processing the system path, an out of bounds access can occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, Q… |
CVE-2018-5887 | High | 7.8 | 2018-07-06 | While processing the USB StrSerialDescriptor array, an array index out of bounds can occur in Android releases from CAF using the linux kernel (Android for MSM… |
CVE-2018-5885 | Critical | 9.8 | 2018-07-06 | While loading dynamic fonts, a buffer overflow may occur if the number of segments in the font file is out of range in Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5884 | High | 8.4 | 2018-07-06 | Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear, Non-standard applications without permission may acquire permission of Qualcomm… |
CVE-2018-5882 | Critical | 9.8 | 2018-07-06 | While parsing a Flac file with a corrupted comment block, a buffer over-read can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5878 | Critical | 9.8 | 2018-07-06 | While sending the response to a RIL_REQUEST_GET_SMSC_ADDRESS message, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon We… |
CVE-2018-5876 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5875 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, an integer overflow leading to a buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5874 | High | 8.8 | 2018-07-06 | While parsing an mp4 file, a stack-based buffer overflow can occur in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear. |
CVE-2018-5838 | High | 7.8 | 2018-07-06 | Improper Validation of Array Index In the adreno OpenGL driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, an out-of-bounds access can occ… |
CVE-2018-5836 | Medium | 5.5 | 2018-07-06 | In wma_nan_rsp_event_handler() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch lev… |
CVE-2018-5835 | High | 7.8 | 2018-07-06 | If the seq_len is greater then CSR_MAX_RSC_LEN, a buffer overflow in __wlan_hdd_cfg80211_add_key() may occur when copying keyRSC in Android releases from CAF u… |
CVE-2018-5834 | High | 7.8 | 2018-07-06 | In __wlan_hdd_cfg80211_vendor_scan(), a buffer overwrite can potentially occur in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS… |
CVE-2018-5832 | High | 7.0 | 2018-07-06 | Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android)… |
CVE-2018-5831 | High | 7.8 | 2018-07-06 | In the KGSL driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-06-0… |
CVE-2018-5830 | High | 7.8 | 2018-07-06 | While processing the HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND message, a buffer overflow can potentially occur in Android releases from CAF using the linux kernel (A… |
CVE-2018-5829 | High | 7.5 | 2018-07-06 | In wlan_hdd_cfg80211_set_privacy_ibss() in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security… |
CVE-2018-3597 | High | 7.8 | 2018-07-06 | In the ADSP RPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-… |
CVE-2018-3577 | High | 7.5 | 2018-07-06 | While processing fragments, when the fragment count becomes very large, an integer overflow leading to a buffer overflow can occur in Android releases from CAF… |
CVE-2018-3569 | High | 7.8 | 2018-07-06 | A buffer over-read can occur during a fast initial link setup (FILS) connection in Android releases from CAF using the linux kernel (Android for MSM, Firefox O… |
CVE-2018-3564 | High | 7.8 | 2018-07-06 | In the FastRPC driver in Android releases from CAF using the linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-0… |
CVE-2018-13409 | Medium | 6.1 | 2018-07-06 | An issue was discovered in Jirafeau before 3.4.1. The "search file by hash" form is affected by reflected XSS that could allow, by targeting an administrator… |
CVE-2018-13408 | Medium | 6.1 | 2018-07-06 | An issue was discovered in Jirafeau before 3.4.1. The "search file by link" form is affected by reflected XSS that could allow, by targeting an administrator… |
CVE-2018-13407 | Medium | 4.9 | 2018-07-06 | A CSRF issue was discovered in Jirafeau before 3.4.1. The "delete file" feature on the admin panel is not protected against automated requests and could be abu… |
CVE-2018-11259 | High | 7.7 | 2018-07-06 | Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS… |
CVE-2018-11258 | High | 7.8 | 2018-07-06 | In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM890… |
CVE-2018-11257 | High | 7.8 | 2018-07-06 | Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 2… |
CVE-2018-10892 | Medium | 5.3 | 2018-07-06 | The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby from 1.11 to current does not block /proc/acpi pathnames. The flaw allows an attacker to m… |
CVE-2018-1676 | Medium | 6.1 | 2018-07-06 | IBM Planning Analytics 2.0.0 through 2.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2018-1621 | Medium | 4.4 | 2018-07-06 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling… |
CVE-2018-1556 | Medium | 5.4 | 2018-07-06 | IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2018-1555 | Medium | 5.4 | 2018-07-06 | IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… |
CVE-2018-1546 | Medium | 5.9 | 2018-07-06 | IBM API Connect 5.0.0.0 through 5.0.8.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Tra… |
CVE-2018-1542 | High | 7.1 | 2018-07-06 | IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vuln… |
CVE-2018-1494 | Medium | 5.4 | 2018-07-06 | IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb… |
CVE-2018-13406 | High | 7.8 | 2018-07-06 | An integer overflow in the uvesafb_setcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being ab… |
CVE-2018-13405 | High | 7.8 | 2018-07-06 | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenar… |
CVE-2018-13110 | High | 7.5 | 2018-07-06 | All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers can gain access to th… |
CVE-2018-13109 | High | 7.5 | 2018-07-06 | All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access a… |
CVE-2018-13108 | High | 7.8 | 2018-07-06 | All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root… |
CVE-2018-11124 | Medium | 5.4 | 2018-07-06 | Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition before 2.2.2 allows remote attackers to inject arbitrary w… |
CVE-2018-8929 | High | 7.3 | 2018-07-06 | Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-0224 allows remote att… |
CVE-2018-13348 | High | 7.5 | 2018-07-06 | The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the curr… |
CVE-2018-13347 | Critical | 9.8 | 2018-07-06 | mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002. |
CVE-2018-13346 | High | 7.5 | 2018-07-06 | The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, ak… |
CVE-2018-13340 | High | 8.8 | 2018-07-05 | Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request. |
CVE-2018-13339 | Medium | 6.1 | 2018-07-05 | Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of an IMG element, a… |
CVE-2018-9998 | Medium | 6.5 | 2018-07-05 | Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folder names in API erro… |
CVE-2018-9997 | Medium | 6.1 | 2018-07-05 | Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, a… |
CVE-2018-8738 | Medium | 6.1 | 2018-07-05 | Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS. |
CVE-2018-8046 | Medium | 6.1 | 2018-07-05 | The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. This framework bri… |
CVE-2018-13052 | Critical | 9.8 | 2018-07-05 | In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes as Admin. |
CVE-2018-13031 | High | 8.8 | 2018-07-05 | DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account. |
CVE-2018-12739 | High | 8.8 | 2018-07-05 | In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266. |
CVE-2018-12571 | Critical | 9.8 | 2018-07-05 | uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrar… |
CVE-2018-12520 | High | 8.1 | 2018-07-05 | An issue was discovered in ntopng 3.4 before 3.4.180617. The PRNG involved in the generation of session IDs is not seeded at program startup. This results in d… |
CVE-2018-12113 | Critical | 9.8 | 2018-07-05 | Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV response. |
CVE-2018-12103 | Medium | 6.5 | 2018-07-05 | An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and DIR-895L/R with fir… |
CVE-2018-10988 | High | 7.8 | 2018-07-05 | An issue was discovered on Diqee Diqee360 devices. A firmware update process, integrated into the firmware, starts at boot and tries to find the update folder… |
CVE-2018-10987 | High | 7.5 | 2018-07-05 | An issue was discovered on Dongguan Diqee Diqee360 devices. The affected vacuum cleaner suffers from an authenticated remote code execution vulnerability. An a… |
CVE-2018-7944 | Medium | 6.8 | 2018-07-05 | Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerability. An attacker g… |
CVE-2018-13328 | High | 7.5 | 2018-07-05 | The transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an Ethereum token, have an integer overflow. |
CVE-2018-13327 | High | 7.5 | 2018-07-05 | The transfer and transferFrom functions of a smart contract implementation for ChuCunLingAIGO (CCLAG), an Ethereum token, have an integer overflow. NOTE: this… |
CVE-2018-13326 | High | 7.5 | 2018-07-05 | The transfer and transferFrom functions of a smart contract implementation for Bittelux (BTX), an Ethereum token, have an integer overflow. NOTE: this has been… |
CVE-2018-13325 | High | 7.5 | 2018-07-05 | The _sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow. |
CVE-2018-12976 | Critical | 9.8 | 2018-07-05 | In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being fetched by gddo to cause a directory tr… |
CVE-2018-12910 | Critical | 9.8 | 2018-07-05 | The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname. |
CVE-2018-12691 | Medium | 6.8 | 2018-07-05 | Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier allows attackers to… |
CVE-2018-12021 | Medium | 6.5 | 2018-07-05 | Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a maliciou… |
CVE-2018-13305 | High | 8.1 | 2018-07-05 | In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger a… |
CVE-2018-13304 | Medium | 6.5 | 2018-07-05 | In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assert… |
CVE-2018-13303 | Medium | 6.5 | 2018-07-05 | In FFmpeg 4.0.1, a missing check for failure of a call to init_get_bits8() in the avpriv_ac3_parse_header function in libavcodec/ac3_parser.c may trigger a NUL… |
CVE-2018-13302 | High | 8.8 | 2018-07-05 | In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 functio… |
CVE-2018-13301 | Medium | 6.5 | 2018-07-05 | In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c may tri… |
CVE-2018-13300 | High | 8.1 | 2018-07-05 | In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/moven… |
CVE-2018-13252 | Medium | 6.1 | 2018-07-05 | Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page. |
CVE-2018-3769 | Medium | 6.1 | 2018-07-05 | ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter. |
CVE-2018-3767 | Critical | 9.1 | 2018-07-05 | `memjs` versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage. |
CVE-2018-3766 | High | 7.5 | 2018-07-05 | Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server. |
CVE-2018-3764 | Medium | 4.8 | 2018-07-05 | In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-interaction. T… |
CVE-2018-3763 | Medium | 4.8 | 2018-07-05 | In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring user-inte… |
CVE-2018-3762 | Medium | 4.3 | 2018-07-05 | Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still request previews for… |
CVE-2018-3761 | High | 8.1 | 2018-07-05 | Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. Missing checks potentially allowed handing out new… |
CVE-2018-8026 | Medium | 5.5 | 2018-07-05 | This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enums… |
CVE-2018-13251 | Medium | 6.5 | 2018-07-05 | In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remot… |
CVE-2018-13250 | Medium | 6.5 | 2018-07-05 | libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could levera… |