2018 CVEs (page 114)
Page 114 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-6211 | High | 7.2 | 2018-06-20 | On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, OS command injection is… |
CVE-2018-5237 | High | 8.8 | 2018-06-20 | Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that a… |
CVE-2018-5236 | Medium | 5.3 | 2018-06-20 | Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issue occurs in softwar… |
CVE-2018-9036 | Medium | 4.8 | 2018-06-20 | CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users. |
CVE-2018-6563 | High | 8.8 | 2018-06-20 | Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authent… |
CVE-2018-12558 | High | 7.5 | 2018-06-20 | The parse() method in the Email::Address module through 1.909 for Perl is vulnerable to Algorithmic complexity on specially prepared input, leading to Denial o… |
CVE-2018-12327 | Critical | 9.8 | 2018-06-20 | Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long… |
CVE-2018-12594 | High | 7.5 | 2018-06-20 | Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/fileinfo.xml or job/job… |
CVE-2018-1132 | High | 7.5 | 2018-06-20 | A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) without authenticating to the controller… |
CVE-2018-1120 | Low | 2.8 | 2018-06-20 | A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or… |
CVE-2018-12592 | High | 7.5 | 2018-06-20 | Polycom RealPresence Web Suite before 2.2.0 does not block a user's video for a few seconds upon joining a meeting (when the user has explicitly chosen to turn… |
CVE-2018-12591 | High | 7.2 | 2018-06-20 | Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due to lack of protection on the admin CLI… |
CVE-2018-12590 | High | 7.2 | 2018-06-20 | Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CL… |
CVE-2018-12446 | Low | 3.6 | 2018-06-20 | An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The Passcode feature allows authentication bypass via runtime manipulation t… |
CVE-2018-12445 | Low | 3.1 | 2018-06-20 | An issue was discovered in the com.dropbox.android application 98.2.2 for Android. The FingerprintManager class for Biometric validation allows authentication… |
CVE-2018-8030 | High | 7.5 | 2018-06-20 | A Denial of Service vulnerability was found in Apache Qpid Broker-J versions 7.0.0-7.0.4 when AMQP protocols 0-8, 0-9 or 0-91 are used to publish messages with… |
CVE-2018-11707 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Read and Execute AV at 0x0057898e, triggered when the user opens a malformed JPEG file that is mishandled by FSViewe… |
CVE-2018-11706 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578dd8, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11705 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cc4, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11704 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d7d, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11703 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00402d6a, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11702 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x00578cb3, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-11701 | High | 7.8 | 2018-06-20 | FastStone Image Viewer 6.2 has a User Mode Write AV at 0x005cb509, triggered when the user opens a malformed JPEG file that is mishandled by FSViewer.exe. Atta… |
CVE-2018-1117 | Medium | 5.0 | 2018-06-20 | ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add oVirt Provider to ManageIQ/CloudForms' pl… |
CVE-2018-12588 | Medium | 6.1 | 2018-06-19 | Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 thro… |
CVE-2018-12519 | High | 8.8 | 2018-06-19 | An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An atta… |
CVE-2018-12294 | High | 8.8 | 2018-06-19 | WebCore/platform/graphics/texmap/TextureMapperLayer.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.2, is vulnerable to a use after free for a WebCo… |
CVE-2018-12293 | High | 8.8 | 2018-06-19 | The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to versi… |
CVE-2018-12098 | Medium | 5.5 | 2018-06-19 | The liblnk_data_block_read function in liblnk_data_block.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure (heap-based… |
CVE-2018-12097 | Medium | 5.5 | 2018-06-19 | The liblnk_location_information_read_data function in liblnk_location_information.c in liblnk through 2018-04-19 allows remote attackers to cause an informatio… |
CVE-2018-12096 | Medium | 5.5 | 2018-06-19 | The liblnk_data_string_get_utf8_string_size function in liblnk_data_string.c in liblnk through 2018-04-19 allows remote attackers to cause an information discl… |
CVE-2018-11731 | Medium | 5.5 | 2018-06-19 | The libfsntfs_mft_entry_read_attributes function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information discl… |
CVE-2018-11730 | Medium | 5.5 | 2018-06-19 | The libfsntfs_security_descriptor_values_free function in libfsntfs_security_descriptor_values.c in libfsntfs through 2018-04-20 allows remote attackers to cau… |
CVE-2018-11729 | Medium | 5.5 | 2018-06-19 | The libfsntfs_mft_entry_read_header function in libfsntfs_mft_entry.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosur… |
CVE-2018-11728 | Medium | 5.5 | 2018-06-19 | The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-20 allows remote attackers to cause an i… |
CVE-2018-11727 | Medium | 5.5 | 2018-06-19 | The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclos… |
CVE-2018-11726 | High | 8.8 | 2018-06-19 | The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly h… |
CVE-2018-11725 | Medium | 6.5 | 2018-06-19 | The mobi_parse_index_entry function in index.c in Libmobi 0.3 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a cr… |
CVE-2018-11724 | High | 8.8 | 2018-06-19 | The mobi_pk1_decrypt function in encryption.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have… |
CVE-2018-11723 | Medium | 5.5 | 2018-06-19 | The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information di… |
CVE-2018-11116 | High | 8.8 | 2018-06-19 | OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary methods (i… |
CVE-2018-10945 | High | 7.5 | 2018-06-19 | The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra… |
CVE-2018-10811 | High | 7.5 | 2018-06-19 | strongSwan 5.6.0 and older allows Remote Denial of Service because of Missing Initialization of a Variable. |
CVE-2018-8727 | High | 7.5 | 2018-06-19 | Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or directories via the… |
CVE-2018-6210 | Critical | 9.8 | 2018-06-19 | D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to ob… |
CVE-2018-11537 | Medium | 6.5 | 2018-06-19 | Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorPro… |
CVE-2018-11526 | High | 7.8 | 2018-06-19 | The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection. |
CVE-2018-11525 | High | 7.8 | 2018-06-19 | The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection. |
CVE-2018-12583 | Medium | 6.5 | 2018-06-19 | An issue was discovered in AKCMS 6.1. CSRF can delete an article via an admincp deleteitem action to index.php. |
CVE-2018-12582 | High | 8.8 | 2018-06-19 | An issue was discovered in AKCMS 6.1. CSRF can add an admin account via a /index.php?file=account&action=manageaccounts&job=newaccount URI. |
CVE-2018-12580 | Medium | 6.1 | 2018-06-19 | library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent… |
CVE-2018-12578 | Critical | 9.8 | 2018-06-19 | There is a heap-based buffer overflow in bmp_compress1_row in appliers.cpp in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impa… |
CVE-2018-1073 | Medium | 5.3 | 2018-06-19 | The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and invalid passwords, allowing an attacker to… |
CVE-2018-1061 | Medium | 6.5 | 2018-06-19 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the difflib.IS_LINE_JUNK method. An attacker… |
CVE-2018-12565 | High | 8.8 | 2018-06-19 | An issue was discovered in Linaro LAVA before 2018.5.post1. Because of use of yaml.load() instead of yaml.safe_load() when parsing user data, remote code execu… |
CVE-2018-12564 | Medium | 6.5 | 2018-06-19 | An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for URLs in the submit page, a user can forge an HTTP request that will force la… |
CVE-2018-12563 | Medium | 6.5 | 2018-06-19 | An issue was discovered in Linaro LAVA before 2018.5.post1. Because of support for file: URLs, a user can force lava-server-gunicorn to download any file from… |
CVE-2018-12562 | Critical | 9.8 | 2018-06-19 | An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The wrapper script 'mount.cifs.wrapper' uses the shell to forward the ar… |
CVE-2018-12561 | High | 8.8 | 2018-06-19 | An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. A regular user can inject additional mount options such as file_mode= by… |
CVE-2018-12560 | Medium | 6.5 | 2018-06-19 | An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. Arbitrary unmounts can be performed by regular users via directory trave… |
CVE-2018-12559 | High | 8.8 | 2018-06-19 | An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp `mpOk()` is insufficient. A r… |
CVE-2018-12557 | Critical | 9.8 | 2018-06-19 | An issue was discovered in Zuul 3.x before 3.1.0. If nodes become offline during the build, the no_log attribute of a task is ignored. If the unreachable error… |
CVE-2018-10623 | Critical | 9.8 | 2018-06-18 | Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the position can be determine… |
CVE-2018-10621 | Critical | 9.8 | 2018-06-18 | Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer where a value larger than the buffer can b… |
CVE-2018-10617 | Critical | 9.8 | 2018-06-18 | Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger than the buffer can be… |
CVE-2018-9029 | Critical | 9.8 | 2018-06-18 | An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL injection attacks. |
CVE-2018-9028 | High | 7.5 | 2018-06-18 | Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking. |
CVE-2018-9027 | Medium | 6.1 | 2018-06-18 | A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute malicious script with a specially crafted… |
CVE-2018-9026 | High | 7.5 | 2018-06-18 | A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions with a specially crafted request. |
CVE-2018-9025 | High | 7.5 | 2018-06-18 | An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with specially crafted input. |
CVE-2018-9024 | Medium | 5.3 | 2018-06-18 | An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in a log file. |
CVE-2018-9023 | High | 8.8 | 2018-06-18 | An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary commands by passing specially crafted argu… |
CVE-2018-9022 | Critical | 9.8 | 2018-06-18 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary code or commands by poiso… |
CVE-2018-9021 | Critical | 9.8 | 2018-06-18 | An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to execute arbitrary commands with specially c… |
CVE-2018-1333 | High | 7.5 | 2018-06-18 | By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed… |
CVE-2018-12534 | Critical | 9.8 | 2018-06-18 | A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress. |
CVE-2018-12531 | Critical | 9.8 | 2018-06-18 | An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into config_db.php, a different vulnerability t… |
CVE-2018-12530 | Medium | 6.5 | 2018-06-18 | An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files via a flienamecsv=../ directory traversal… |
CVE-2018-1153 | High | 7.4 | 2018-06-18 | Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests which allows a man in the middle to modify… |
CVE-2018-1152 | Medium | 6.5 | 2018-06-18 | libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted BMP image. |
CVE-2018-1090 | Medium | 5.5 | 2018-06-18 | In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with read access on the dis… |
CVE-2018-1060 | High | 7.5 | 2018-06-18 | python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3lib's apop() method. An attacker could use… |
CVE-2018-12533 | Critical | 9.8 | 2018-06-18 | JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via… |
CVE-2018-12532 | Critical | 9.8 | 2018-06-18 | JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitr… |
CVE-2018-12525 | Medium | 5.3 | 2018-06-18 | An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ provides a directory listing. |
CVE-2018-12524 | Medium | 5.3 | 2018-06-18 | An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /lib/ provides a directory listing. |
CVE-2018-12523 | Medium | 5.3 | 2018-06-18 | An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /etc/ provides a directory listing. |
CVE-2018-12522 | Medium | 5.3 | 2018-06-18 | An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /style/ provides a directory listing. |
CVE-2018-12104 | Medium | 6.1 | 2018-06-17 | Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments f… |
CVE-2018-12073 | Medium | 5.3 | 2018-06-17 | An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set a new one within the web interface. Ther… |
CVE-2018-12072 | Critical | 9.8 | 2018-06-17 | An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide TELNET remote access (without a password… |
CVE-2018-12071 | Critical | 9.8 | 2018-06-17 | A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled. |
CVE-2018-12029 | High | 7.0 | 2018-06-17 | A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privileges when a non-standard passenger_inst… |
CVE-2018-12028 | High | 7.8 | 2018-06-17 | An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawnin… |
CVE-2018-12027 | High | 8.8 | 2018-06-17 | An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a… |
CVE-2018-12026 | Critical | 9.8 | 2018-06-17 | During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key f… |
CVE-2018-11219 | Critical | 9.8 | 2018-06-17 | An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading… |
CVE-2018-11218 | Critical | 9.8 | 2018-06-17 | Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stac… |
CVE-2018-10997 | Critical | 9.8 | 2018-06-17 | Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPassword. |
CVE-2018-12338 | Critical | 9.8 | 2018-06-17 | Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confidential information and manipulate securit… |