2018 CVEs (page 117)
Page 117 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-12257 | Medium | 4.4 | 2018-06-12 | An issue was discovered on Momentum Axel 720P 5.1.8 devices. There is Authenticated Custom Firmware Upgrade via DNS Hijacking. An authenticated root user with… |
CVE-2018-12254 | High | 8.8 | 2018-06-12 | router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/… |
CVE-2018-1151 | Critical | 9.8 | 2018-06-12 | The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause den… |
CVE-2018-10509 | High | 8.8 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An att… |
CVE-2018-10508 | High | 8.8 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable in… |
CVE-2018-10507 | Medium | 4.4 | 2018-06-12 | A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Chan… |
CVE-2018-10470 | Medium | 5.3 | 2018-06-12 | Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefore do not v… |
CVE-2018-5814 | High | 7.0 | 2018-06-12 | In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling probe, disconnect, and rebind operation… |
CVE-2018-5803 | Medium | 5.5 | 2018-06-12 | In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk… |
CVE-2018-5718 | High | 7.1 | 2018-06-12 | Improper restriction of write operations within the bounds of a memory buffer in snscore.sys in SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure… |
CVE-2018-2428 | Medium | 5.3 | 2018-06-12 | Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP In… |
CVE-2018-2425 | High | 8.4 | 2018-06-12 | Under certain conditions, SAP Business One, 9.2, 9.3, for SAP HANA backup service allows an attacker to access information which would otherwise be restricted. |
CVE-2018-2424 | Critical | 9.8 | 2018-06-12 | SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that… |
CVE-2018-1103 | Medium | 6.1 | 2018-06-12 | Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using… |
CVE-2018-12249 | High | 7.5 | 2018-06-12 | An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class_real because "class BasicObject" is not properly supported in class.c. |
CVE-2018-12248 | High | 7.5 | 2018-06-12 | An issue was discovered in mruby 1.4.1. There is a heap-based buffer over-read associated with OP_ENTER because mrbgems/mruby-fiber/src/fiber.c does not extend… |
CVE-2018-12247 | High | 7.5 | 2018-06-12 | An issue was discovered in mruby 1.4.1. There is a NULL pointer dereference in mrb_class, related to certain .clone usage, because mrb_obj_clone in kernel.c co… |
CVE-2018-1075 | Medium | 5.0 | 2018-06-12 | ovirt-engine up to version 4.2.3 is vulnerable to an unfiltered password when choosing manual db provisioning. When engine-setup was run and one chooses to pro… |
CVE-2018-1070 | Medium | 6.5 | 2018-06-12 | routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought… |
CVE-2018-0732 | High | 7.5 | 2018-06-12 | During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the… |
CVE-2018-12233 | High | 7.8 | 2018-06-12 | In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be triggered by calling setxattr twice with two… |
CVE-2018-12232 | Medium | 5.9 | 2018-06-12 | In net/socket.c in the Linux kernel through 4.17.1, there is a race condition between fchownat and close in cases where they target the same socket file descri… |
CVE-2018-12229 | Medium | 6.1 | 2018-06-12 | Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitra… |
CVE-2018-12228 | Medium | 6.5 | 2018-06-12 | An issue was discovered in Asterisk Open Source 15.x before 15.4.1. When connected to Asterisk via TCP/TLS, if the client abruptly disconnects, or sends a spec… |
CVE-2018-12227 | Medium | 5.3 | 2018-06-12 | An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18-cert before 13.18-… |
CVE-2018-6968 | Critical | 10.0 | 2018-06-11 | The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability in real t… |
CVE-2018-6961 | High | 8.1 | 2018-06-11 | VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component is disabled… |
CVE-2018-5185 | Medium | 6.5 | 2018-06-11 | Plaintext of decrypted emails can leak through by user submitting an embedded form. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. |
CVE-2018-5184 | High | 7.5 | 2018-06-11 | Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8. |
CVE-2018-5183 | Critical | 9.8 | 2018-06-11 | Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes du… |
CVE-2018-5182 | High | 7.5 | 2018-06-11 | If a text string that happens to be a filename in the operating system's native format is dragged and dropped onto the addressbar the specified local file will… |
CVE-2018-5181 | High | 7.5 | 2018-06-11 | If a URL using the "file:" protocol is dragged and dropped onto an open tab that is running in a different child process the tab will open a local file corresp… |
CVE-2018-5180 | High | 7.5 | 2018-06-11 | A use-after-free vulnerability can occur during WebGL operations. While this results in a potentially exploitable crash, the vulnerability is limited because t… |
CVE-2018-5178 | High | 8.1 | 2018-06-11 | A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the us… |
CVE-2018-5177 | High | 7.5 | 2018-06-11 | A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer overflow and crash… |
CVE-2018-5176 | Medium | 6.1 | 2018-06-11 | The JSON Viewer displays clickable hyperlinks for strings that are parseable as URLs, including "javascript:" links. If a JSON file contains malicious JavaScri… |
CVE-2018-5175 | Medium | 6.1 | 2018-06-11 | A mechanism to bypass Content Security Policy (CSP) protections on sites that have a "script-src" policy of "'strict-dynamic'". If a target website contains an… |
CVE-2018-5174 | High | 7.5 | 2018-06-11 | In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any… |
CVE-2018-5173 | Medium | 5.3 | 2018-06-11 | The filename appearing in the "Downloads" panel improperly renders some Unicode characters, allowing for the file name to be spoofed. This can be used to obscu… |
CVE-2018-5172 | Medium | 4.3 | 2018-06-11 | The Live Bookmarks page and the PDF viewer can run injected script content if a user pastes script from the clipboard into them while viewing RSS feeds or PDF… |
CVE-2018-5170 | Medium | 4.3 | 2018-06-11 | It is possible to spoof the filename of an attachment and display an arbitrary attachment name. This could lead to a user opening a remote attachment which is… |
CVE-2018-5169 | Medium | 6.5 | 2018-06-11 | If manipulated hyperlinked text with "chrome:" URL contained in it is dragged and dropped on the "home" icon, the home page can be reset to include a normally-… |
CVE-2018-5168 | Medium | 5.3 | 2018-06-11 | Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element. This could allow a m… |
CVE-2018-5167 | Medium | 4.3 | 2018-06-11 | The web console and JavaScript debugger do not sanitize all output that can be hyperlinked. Both will display "chrome:" links as active, clickable hyperlinks i… |
CVE-2018-5166 | High | 7.5 | 2018-06-11 | WebExtensions can use request redirection and a "filterReponseData" filter to bypass host permission settings to redirect network traffic and access content fr… |
CVE-2018-5165 | Medium | 5.3 | 2018-06-11 | In 32-bit versions of Firefox, the Adobe Flash plugin setting for "Enable Adobe Flash protected mode" is unchecked by default even though the Adobe Flash sandb… |
CVE-2018-5164 | Medium | 6.1 | 2018-06-11 | Content Security Policy (CSP) is not applied correctly to all parts of multipart content sent with the "multipart/x-mixed-replace" MIME type. This could allow… |
CVE-2018-5163 | High | 8.1 | 2018-06-11 | If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources st… |
CVE-2018-5162 | High | 7.5 | 2018-06-11 | Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird… |
CVE-2018-5161 | Medium | 4.3 | 2018-06-11 | Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 5… |
CVE-2018-5160 | High | 7.5 | 2018-06-11 | WebRTC can use a "WrappedI420Buffer" pixel buffer but the owning image object can be freed while it is still in use. This can result in the WebRTC encoder usin… |
CVE-2018-5159 | Critical | 9.8 | 2018-06-11 | An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds wr… |
CVE-2018-5158 | High | 8.8 | 2018-06-11 | The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This Ja… |
CVE-2018-5157 | High | 7.5 | 2018-06-11 | Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept messages meant for the viewer. This could allow the site to… |
CVE-2018-5155 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths. This results in a potentially exploitable crash. This vu… |
CVE-2018-5154 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. T… |
CVE-2018-5153 | High | 7.5 | 2018-06-11 | If websocket data is sent with mixed text and binary in a single message, the binary data can be corrupted. This can result in an out-of-bounds read with the r… |
CVE-2018-5152 | Medium | 6.5 | 2018-06-11 | WebExtensions with the appropriate permissions can attach content scripts to Mozilla sites such as accounts.firefox.com and listen to network traffic to the si… |
CVE-2018-5151 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 59. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5150 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume… |
CVE-2018-5148 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one. Th… |
CVE-2018-5147 | Critical | 9.8 | 2018-06-11 | The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms. This vulnerabilit… |
CVE-2018-5146 | High | 8.8 | 2018-06-11 | An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox… |
CVE-2018-5145 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these… |
CVE-2018-5144 | High | 7.3 | 2018-06-11 | An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox… |
CVE-2018-5143 | Medium | 6.1 | 2018-06-11 | URLs using "javascript:" have the protocol removed when pasted into the addressbar to protect users from cross-site scripting (XSS) attacks, but if a tab chara… |
CVE-2018-5142 | Medium | 5.3 | 2018-06-11 | If Media Capture and Streams API permission is requested from documents with "data:" or "blob:" URLs, the permission notifications do not properly display the… |
CVE-2018-5141 | High | 8.2 | 2018-06-11 | A vulnerability in the notifications Push API where notifications can be sent through service workers by web content without direct user interaction. This coul… |
CVE-2018-5140 | Medium | 5.3 | 2018-06-11 | Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow for informa… |
CVE-2018-5138 | Medium | 5.3 | 2018-06-11 | A spoofing vulnerability can occur when a malicious site with an extremely long domain name is opened in an Android Custom Tab (a browser panel inside another… |
CVE-2018-5137 | High | 7.5 | 2018-06-11 | A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a malicious… |
CVE-2018-5136 | High | 7.5 | 2018-06-11 | A shared worker created from a "data:" URL in one tab can be shared by another tab with a different origin, bypassing the same-origin policy. This vulnerabilit… |
CVE-2018-5135 | High | 7.5 | 2018-06-11 | WebExtensions can bypass normal restrictions in some circumstances and use "browser.tabs.executeScript" to inject scripts into contexts where this should not b… |
CVE-2018-5134 | High | 7.5 | 2018-06-11 | WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that only allow… |
CVE-2018-5133 | Medium | 6.5 | 2018-06-11 | If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It will be e… |
CVE-2018-5132 | Medium | 6.5 | 2018-06-11 | The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebE… |
CVE-2018-5131 | Medium | 5.9 | 2018-06-11 | Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instea… |
CVE-2018-5130 | High | 8.8 | 2018-06-11 | When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulner… |
CVE-2018-5129 | High | 8.6 | 2018-06-11 | A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbo… |
CVE-2018-5128 | Critical | 9.8 | 2018-06-11 | A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. This results in a potentially explo… |
CVE-2018-5127 | High | 8.8 | 2018-06-11 | A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability… |
CVE-2018-5126 | Critical | 9.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of the… |
CVE-2018-5125 | High | 8.8 | 2018-06-11 | Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough ef… |
CVE-2018-5122 | Critical | 9.8 | 2018-06-11 | A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result in an out-of-bounds… |
CVE-2018-5121 | Medium | 5.3 | 2018-06-11 | Low descenders on some Tibetan characters in several fonts on OS X are clipped when rendered in the addressbar. When used as part of an Internationalized Domai… |
CVE-2018-5119 | Medium | 5.3 | 2018-06-11 | The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin content by a site. This could allow access… |
CVE-2018-5118 | Medium | 5.3 | 2018-06-11 | The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discover… |
CVE-2018-5117 | Medium | 5.3 | 2018-06-11 | If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed U… |
CVE-2018-5116 | Critical | 9.8 | 2018-06-11 | WebExtensions with the "ActiveTab" permission are able to access frames hosted within the active tab even if the frames are cross-origin. Malicious extensions… |
CVE-2018-5115 | High | 7.5 | 2018-06-11 | If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded foreground pa… |
CVE-2018-5114 | Medium | 5.3 | 2018-06-11 | If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that document is closed… |
CVE-2018-5113 | High | 7.5 | 2018-06-11 | The "browser.identity.launchWebAuthFlow" function of WebExtensions is only allowed to load content over "https:" but this requirement was not properly enforced… |
CVE-2018-5112 | High | 7.5 | 2018-06-11 | Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was no… |
CVE-2018-5111 | Medium | 6.5 | 2018-06-11 | When the text of a specially formatted URL is dragged to the addressbar from page content, the displayed URL can be spoofed to show a different site than the o… |
CVE-2018-5110 | Medium | 5.3 | 2018-06-11 | If cursor visibility is toggled by script using from 'none' to an image and back through script, the cursor will be rendered temporarily invisible within Firef… |
CVE-2018-5109 | Medium | 5.3 | 2018-06-11 | An audio capture session can started under an incorrect origin from the site making the capture request. Users are still prompted to allow the request but the… |
CVE-2018-5108 | Medium | 4.3 | 2018-06-11 | A Blob URL can violate origin attribute segregation, allowing it to be accessed from a private browsing tab and for data to be passed between the private brows… |
CVE-2018-5107 | Medium | 5.3 | 2018-06-11 | The printing process can bypass local access protections to read files available through symlinks, bypassing local file restrictions. The printing process requ… |
CVE-2018-5106 | Medium | 5.3 | 2018-06-11 | Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when these too… |
CVE-2018-5105 | High | 7.8 | 2018-06-11 | WebExtensions can bypass user prompts to first save and then open an arbitrarily downloaded file. This can result in an executable file running with local user… |