2018 CVEs (page 115)
Page 115 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12337 | Medium | 4.6 | 2018-06-17 | Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to partially extract confidential configurati… |
CVE-2018-12336 | Critical | 9.8 | 2018-06-17 | Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential information via remote root SSH access. |
CVE-2018-12335 | High | 7.3 | 2018-06-17 | Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authentication keys, and access and manipulate securi… |
CVE-2018-12334 | High | 7.5 | 2018-06-17 | Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a virtualization… |
CVE-2018-12333 | High | 8.1 | 2018-06-17 | Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to manipulate security relevant confi… |
CVE-2018-12332 | Medium | 4.2 | 2018-06-17 | Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via a compromise… |
CVE-2018-12331 | High | 7.4 | 2018-06-17 | Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-the-middle attacker to compromise authenti… |
CVE-2018-12330 | High | 8.1 | 2018-06-17 | Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication and encryption keys via compromised firm… |
CVE-2018-12329 | Medium | 5.9 | 2018-06-17 | Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authentication factor via cloning. |
CVE-2018-11647 | Medium | 6.1 | 2018-06-17 | index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL. |
CVE-2018-10969 | Critical | 9.8 | 2018-06-17 | SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute arbitrary SQL commands via the invitation… |
CVE-2018-10377 | Medium | 5.9 | 2018-06-17 | PortSwigger Burp Suite before 1.7.34 has Improper Certificate Validation of the Collaborator server certificate, which might allow man-in-the-middle attackers… |
CVE-2018-12326 | High | 8.4 | 2018-06-17 | Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x before 5.0 RC3 allows an attacker to achieve code execution and escalate to higher privileges via a… |
CVE-2018-12454 | High | 7.5 | 2018-06-17 | The _addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly reada… |
CVE-2018-12453 | High | 7.5 | 2018-06-16 | Type confusion in the xgroupCommand function in t_stream.c in redis-server in Redis before 5.0 allows remote attackers to cause denial-of-service via an XGROUP… |
CVE-2018-12504 | High | 7.5 | 2018-06-16 | tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h. |
CVE-2018-12503 | Critical | 9.8 | 2018-06-16 | tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h. |
CVE-2018-12501 | Medium | 6.1 | 2018-06-16 | Nagios Fusion before 4.1.4 has XSS, aka TPS#13332-13335. |
CVE-2018-9859 | High | 8.1 | 2018-06-16 | The path of Whale update service was unquoted in NAVER Whale before 1.0.40.7. This vulnerability can be used for persistent privilege escalation if it's availa… |
CVE-2018-6497 | High | 8.8 | 2018-06-16 | Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Server version DDM Content Pack V 10.20, 10.21, 10.22, 10.22 CUP7, 10.30, 10.31… |
CVE-2018-6496 | High | 8.8 | 2018-06-16 | Remote Cross-site Request forgery (CSRF) potential has been identified in UCMBD Browser version 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.15.1 which could allow fo… |
CVE-2018-5756 | Medium | 4.3 | 2018-06-16 | The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 does no… |
CVE-2018-5755 | Medium | 5.5 | 2018-06-16 | Absolute path traversal vulnerability in the readerengine component in Open-Xchange OX App Suite before 7.6.3-rev3, 7.8.x before 7.8.2-rev4, 7.8.3 before 7.8.3… |
CVE-2018-5754 | Medium | 5.4 | 2018-06-16 | Cross-site scripting (XSS) vulnerability in the office-web component in Open-Xchange OX App Suite before 7.8.3-rev12 and 7.8.4 before 7.8.4-rev9 allows remote… |
CVE-2018-5753 | Medium | 6.5 | 2018-06-16 | The frontend component in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 before 7.8.3-rev41, and 7.8.4 before 7.8.4-rev20 allows… |
CVE-2018-5752 | High | 8.8 | 2018-06-16 | The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows… |
CVE-2018-5751 | Medium | 6.5 | 2018-06-16 | The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows… |
CVE-2018-11223 | Medium | 5.4 | 2018-06-16 | XSS in Artica Pandora FMS before 7.0 NG 723 allows an attacker to execute arbitrary code via a crafted "refr" parameter in a "/pandora_console/index.php?sec=es… |
CVE-2018-11222 | High | 7.5 | 2018-06-16 | Local File Inclusion (LFI) in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandora_console/ajax.php ajax endpoint. |
CVE-2018-11221 | Critical | 9.8 | 2018-06-16 | Unauthenticated untrusted file upload in Artica Pandora FMS through version 7.23 allows an attacker to upload an arbitrary plugin via include/ajax/update_manag… |
CVE-2018-5863 | High | 7.8 | 2018-06-15 | If userspace provides a too-large WPA RSN IE length in wlan_hdd_cfg80211_set_ie(), a buffer overflow occurs in all Android releases(Android for MSM, Firefox OS… |
CVE-2018-5860 | Medium | 5.5 | 2018-06-15 | In the MDSS driver in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, a data structure may be used with… |
CVE-2018-12498 | Critical | 9.8 | 2018-06-15 | spider.admincp.php in iCMS v7.0.8 has SQL Injection via the id parameter in an app=spider&do=batch request to admincp.php. |
CVE-2018-12495 | Medium | 5.5 | 2018-06-15 | The quoteblock function in markdown.c in libmarkdown.a in DISCOUNT 2.2.3a allows remote attackers to cause a denial of service (heap-based buffer over-read) vi… |
CVE-2018-12494 | Medium | 6.5 | 2018-06-15 | An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsTemplate/content.h… |
CVE-2018-12493 | Medium | 6.5 | 2018-06-15 | An issue was discovered in PublicCMS V4.0.20180210. There is a "Directory Traversal" and "Arbitrary file read" vulnerability via an admin/cmsWebFile/list.html?… |
CVE-2018-12492 | High | 7.5 | 2018-06-15 | PHPOK 4.9.032 has an arbitrary file deletion vulnerability in the delfile_f function in framework/admin/tpl_control.php. |
CVE-2018-12491 | Critical | 9.8 | 2018-06-15 | PHPOK 4.9.032 has an arbitrary file upload vulnerability in the import_f function in framework/admin/modulec_control.php, as demonstrated by uploading a .php f… |
CVE-2018-12481 | Critical | 9.8 | 2018-06-15 | The Olive Tree Ftp Server application 1.32 for Android has a "Sensitive Data on the Clipboard" vulnerability, as demonstrated by reading the "User password" fi… |
CVE-2018-12422 | Critical | 9.8 | 2018-06-15 | addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow v… |
CVE-2018-12035 | High | 7.8 | 2018-06-15 | In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds write vulnerability in yr_execute_code in libyara/exec.c. |
CVE-2018-12034 | High | 7.8 | 2018-06-15 | In YARA 3.7.1 and prior, parsing a specially crafted compiled rule file can cause an out of bounds read vulnerability in yr_execute_code in libyara/exec.c. |
CVE-2018-12030 | Medium | 5.4 | 2018-06-15 | Chevereto Free before 1.0.13 has XSS. |
CVE-2018-5857 | High | 7.8 | 2018-06-15 | In the WCD CPE codec, a Use After Free condition can occur in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux k… |
CVE-2018-5854 | High | 7.8 | 2018-06-15 | A stack-based buffer overflow can occur in fastboot from all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel. |
CVE-2018-12460 | Medium | 6.5 | 2018-06-15 | libavcodec in FFmpeg 4.0 may trigger a NULL pointer dereference if the studio profile is incorrectly detected while converting a crafted AVI file to MPEG4, lea… |
CVE-2018-12459 | Medium | 6.5 | 2018-06-15 | An inconsistent bits-per-sample value in the ff_mpeg4_decode_picture_header function in libavcodec/mpeg4videodec.c in FFmpeg 4.0 may trigger an assertion viola… |
CVE-2018-12458 | Medium | 6.5 | 2018-06-15 | An improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc.c in FFmpeg 2.8 and 4.0 may trigger an assertion violation while c… |
CVE-2018-6672 | Medium | 5.7 | 2018-06-15 | Information disclosure vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows authenticated users to view sensit… |
CVE-2018-6671 | Medium | 4.7 | 2018-06-15 | Application Protection Bypass vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.0 through 5.3.3 and 5.9.0 through 5.9.1 allows remote authenticated users… |
CVE-2018-1460 | High | 8.4 | 2018-06-15 | IBM Netezza Platform Software (IBM PureData System for Analytics 1.0.0) could allow a local user to modify a world writable file, which could be used to execut… |
CVE-2018-1419 | Low | 3.7 | 2018-06-15 | IBM WebSphere MQ 8.0 and 9.0, when configured to use a PAM module for authentication, could allow a user to cause a deadlock in the IBM MQ PAM code which could… |
CVE-2018-12457 | High | 8.8 | 2018-06-15 | expressCart before 1.1.6 allows remote attackers to create an admin user via a /admin/setup Referer header. |
CVE-2018-12447 | High | 8.8 | 2018-06-15 | The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a heap-based… |
CVE-2018-1085 | Critical | 9.0 | 2018-06-15 | openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes the SSL client certificate authentication to be disabled. Quotat… |
CVE-2018-12440 | Medium | 4.7 | 2018-06-15 | BoringSSL through 2018-06-14 allows a memory-cache side-channel attack on DSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a D… |
CVE-2018-12439 | Medium | 4.7 | 2018-06-15 | MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a… |
CVE-2018-12438 | Medium | 4.9 | 2018-06-15 | The Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Num… |
CVE-2018-12437 | Medium | 4.9 | 2018-06-15 | LibTomCrypt through 1.18.1 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an… |
CVE-2018-12436 | Medium | 4.7 | 2018-06-15 | wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem o… |
CVE-2018-12435 | Medium | 5.9 | 2018-06-15 | Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, rel… |
CVE-2018-12434 | Medium | 4.7 | 2018-06-15 | LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem… |
CVE-2018-12433 | Medium | 4.9 | 2018-06-15 | cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover… |
CVE-2018-12356 | Critical | 9.8 | 2018-06-15 | An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses the output of GnuPG… |
CVE-2018-12432 | Medium | 6.1 | 2018-06-14 | JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI. |
CVE-2018-12431 | Medium | 4.8 | 2018-06-14 | SeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system management page). |
CVE-2018-6516 | High | 7.8 | 2018-06-14 | On Windows only, with a specifically crafted configuration file an attacker could get Puppet PE client tools (aka pe-client-tools) 16.4.x prior to 16.4.6, 17.3… |
CVE-2018-12423 | High | 7.5 | 2018-06-14 | In Synapse before 0.31.2, unauthorised users can hijack rooms when there is no m.room.power_levels event in force. |
CVE-2018-12420 | High | 7.5 | 2018-06-14 | IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request. |
CVE-2018-8819 | High | 7.5 | 2018-06-14 | An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to… |
CVE-2018-11690 | Medium | 6.1 | 2018-06-14 | The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supp… |
CVE-2018-11689 | Medium | 6.1 | 2018-06-14 | Web Viewer for Hanwha DVR 2.17 and Smart Viewer in Samsung Web Viewer for Samsung DVR are vulnerable to XSS via the /cgi-bin/webviewer_login_page data3 paramet… |
CVE-2018-11574 | Critical | 9.8 | 2018-06-14 | Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authen… |
CVE-2018-12421 | Critical | 9.8 | 2018-06-14 | LTB (aka LDAP Tool Box) Self Service Password before 1.3 allows a change to a user password (without knowing the old password) via a crafted POST request, beca… |
CVE-2018-12114 | High | 8.8 | 2018-06-14 | Maccms 10 allows CSRF via admin.php/admin/admin/info.html to add user accounts. |
CVE-2018-4848 | Medium | 6.1 | 2018-06-14 | A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.3), SCALANCE X-200IRT switch family (incl… |
CVE-2018-4842 | Medium | 4.8 | 2018-06-14 | A vulnerability has been identified in SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.4.1), SCALANCE X-200RNA switch family (Al… |
CVE-2018-4833 | High | 8.8 | 2018-06-14 | A vulnerability has been identified in RFID 181EIP (All versions), RUGGEDCOM Win (V4.4, V4.5, V5.0, and V5.1), SCALANCE X-200 switch family (incl. SIPLUS NET v… |
CVE-2018-12418 | Medium | 5.5 | 2018-06-14 | Archive.java in Junrar before 1.0.1, as used in Apache Tika and other products, is affected by a denial of service vulnerability due to an infinite loop when h… |
CVE-2018-10821 | Medium | 4.8 | 2018-06-14 | Cross-site scripting (XSS) vulnerability in backend/pages/modify.php in BlackCatCMS 1.3 allows remote authenticated users with the Admin role to inject arbitra… |
CVE-2018-8927 | Medium | 5.4 | 2018-06-14 | Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) c… |
CVE-2018-8267 | High | 7.5 | 2018-06-14 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory… |
CVE-2018-8254 | Medium | 5.4 | 2018-06-14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share… |
CVE-2018-8252 | Medium | 5.4 | 2018-06-14 | An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected Share… |
CVE-2018-8251 | High | 7.5 | 2018-06-14 | A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerabil… |
CVE-2018-8249 | High | 7.5 | 2018-06-14 | A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerabili… |
CVE-2018-8248 | High | 7.8 | 2018-06-14 | A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Rem… |
CVE-2018-8247 | Medium | 5.4 | 2018-06-14 | An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft O… |
CVE-2018-8246 | Medium | 5.5 | 2018-06-14 | An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosur… |
CVE-2018-8245 | High | 7.8 | 2018-06-14 | A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE ob… |
CVE-2018-8244 | Medium | 6.5 | 2018-06-14 | An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privil… |
CVE-2018-8243 | High | 7.5 | 2018-06-14 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption… |
CVE-2018-8239 | Medium | 5.5 | 2018-06-14 | An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Dis… |
CVE-2018-8236 | High | 7.5 | 2018-06-14 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." T… |
CVE-2018-8235 | Medium | 4.3 | 2018-06-14 | A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypas… |
CVE-2018-8234 | Medium | 4.3 | 2018-06-14 | An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerabili… |
CVE-2018-8233 | High | 7.8 | 2018-06-14 | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privil… |
CVE-2018-8231 | High | 8.1 | 2018-06-14 | A remote code execution vulnerability exists when HTTP Protocol Stack (Http.sys) improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Exe… |
CVE-2018-8229 | High | 7.5 | 2018-06-14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |
CVE-2018-8227 | High | 7.5 | 2018-06-14 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Eng… |