2018 CVEs (page 119)
Page 119 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-8926 | High | 8.8 | 2018-06-08 | Permissive regular expression vulnerability in synophoto_dsm_user in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated u… |
CVE-2018-8925 | High | 8.8 | 2018-06-08 | Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hi… |
CVE-2018-8916 | Medium | 6.3 | 2018-06-08 | Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to reset p… |
CVE-2018-1453 | High | 8.8 | 2018-06-08 | IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically p… |
CVE-2018-12065 | Critical | 9.8 | 2018-06-08 | A Local File Inclusion vulnerability in /system/WCore/WHelper.php in Creatiwity wityCMS 0.6.2 allows remote attackers to include local PHP files (execute PHP c… |
CVE-2018-12064 | Critical | 9.8 | 2018-06-08 | tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. |
CVE-2018-11409 | Medium | 5.3 | 2018-06-08 | Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discover… |
CVE-2018-10088 | Critical | 9.8 | 2018-06-08 | Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725. |
CVE-2018-12055 | Critical | 9.8 | 2018-06-08 | Multiple SQL Injections exist in PHP Scripts Mall Schools Alert Management Script via crafted POST data in contact_us.php, faq.php, about.php, photo_gallery.ph… |
CVE-2018-12054 | High | 7.5 | 2018-06-08 | Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script via the f parameter in img.php, aka absolute path traversal. |
CVE-2018-12053 | High | 7.5 | 2018-06-08 | Arbitrary File Deletion exists in PHP Scripts Mall Schools Alert Management Script via the img parameter in delete_img.php by using directory traversal. |
CVE-2018-12052 | Critical | 9.8 | 2018-06-08 | SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in get_sec.php. |
CVE-2018-12051 | Critical | 9.8 | 2018-06-08 | Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script via $_FILE in /webmasterst/general.php, as demonstrat… |
CVE-2018-9246 | Critical | 9.8 | 2018-06-08 | The PGObject::Util::DBAdmin module before 0.120.0 for Perl, as used in LedgerSMB through 1.5.x, insufficiently sanitizes or escapes variable values used as par… |
CVE-2018-9182 | Medium | 6.1 | 2018-06-08 | Twonky Server before 8.5.1 has XSS via a modified "language" parameter in the Language section. |
CVE-2018-9177 | Medium | 6.1 | 2018-06-08 | Twonky Server before 8.5.1 has XSS via a folder name on the Shared Folders screen. |
CVE-2018-12049 | Critical | 9.8 | 2018-06-08 | A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.ht… |
CVE-2018-12048 | Critical | 9.8 | 2018-06-08 | A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html… |
CVE-2018-12047 | Medium | 6.1 | 2018-06-08 | xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12. |
CVE-2018-12046 | High | 7.5 | 2018-06-08 | DedeCMS through 5.7SP2 allows arbitrary file write in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=newfile request with name and str param… |
CVE-2018-12045 | Critical | 9.8 | 2018-06-08 | DedeCMS through V5.7SP2 allows arbitrary file upload in dede/file_manage_control.php via a dede/file_manage_view.php?fmdo=upload request with an upfile1 parame… |
CVE-2018-12041 | High | 7.5 | 2018-06-08 | An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 8… |
CVE-2018-11229 | Critical | 9.8 | 2018-06-08 | Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via comm… |
CVE-2018-11228 | Critical | 9.8 | 2018-06-08 | Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Ba… |
CVE-2018-3758 | High | 8.8 | 2018-06-07 | Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine. |
CVE-2018-0357 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the… |
CVE-2018-0356 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the… |
CVE-2018-0355 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conduct a cross-frame scr… |
CVE-2018-0354 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack a… |
CVE-2018-0352 | Medium | 6.7 | 2018-06-07 | A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to… |
CVE-2018-0340 | Medium | 5.4 | 2018-06-07 | A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an authenticated, remote attacker to conduct… |
CVE-2018-0339 | Medium | 6.1 | 2018-06-07 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a cros… |
CVE-2018-0338 | High | 7.8 | 2018-06-07 | A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System (UCS) Software could allow an authenticated, local attacker to e… |
CVE-2018-0336 | High | 8.8 | 2018-06-07 | A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to escalate privilege… |
CVE-2018-0335 | High | 7.8 | 2018-06-07 | A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attacker to view sensi… |
CVE-2018-0334 | Medium | 4.8 | 2018-06-07 | A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac… |
CVE-2018-0333 | Medium | 5.8 | 2018-06-07 | A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass VPN security d… |
CVE-2018-0332 | High | 7.5 | 2018-06-07 | A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unauthenticated, remote at… |
CVE-2018-0329 | Medium | 5.3 | 2018-06-07 | A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software c… |
CVE-2018-0149 | Medium | 4.8 | 2018-06-07 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director Software could allow… |
CVE-2018-12043 | Medium | 6.1 | 2018-06-07 | content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page. |
CVE-2018-12042 | High | 7.5 | 2018-06-07 | Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter. |
CVE-2018-10619 | High | 7.8 | 2018-06-07 | An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized… |
CVE-2018-12039 | Critical | 9.8 | 2018-06-07 | joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "/!select/" substrin… |
CVE-2018-6670 | High | 7.6 | 2018-06-07 | External Entity Attack vulnerability in the ePO extension in McAfee Common UI (CUI) 2.0.2 allows remote authenticated users to view confidential information vi… |
CVE-2018-12036 | High | 7.8 | 2018-06-07 | OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames. |
CVE-2018-12031 | Critical | 9.8 | 2018-06-07 | Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory traversal with the f… |
CVE-2018-1547 | High | 8.0 | 2018-06-07 | IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused by improper output e… |
CVE-2018-1514 | Medium | 4.3 | 2018-06-07 | IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… |
CVE-2018-12016 | High | 7.5 | 2018-06-07 | libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via certain window.open an… |
CVE-2018-7689 | High | 7.1 | 2018-06-07 | Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages whe… |
CVE-2018-7688 | High | 7.1 | 2018-06-07 | A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects whe… |
CVE-2018-12015 | High | 7.5 | 2018-06-07 | In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, vi… |
CVE-2018-0353 | High | 7.5 | 2018-06-07 | A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Tra… |
CVE-2018-0322 | High | 8.8 | 2018-06-07 | A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to modify sensiti… |
CVE-2018-0321 | Critical | 9.8 | 2018-06-07 | A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RM… |
CVE-2018-0320 | Critical | 9.8 | 2018-06-07 | A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary… |
CVE-2018-0319 | Critical | 9.8 | 2018-06-07 | A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unaut… |
CVE-2018-0318 | Critical | 9.8 | 2018-06-07 | A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthor… |
CVE-2018-0317 | High | 8.8 | 2018-06-07 | A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalate their privileges… |
CVE-2018-0316 | High | 7.5 | 2018-06-07 | A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Fi… |
CVE-2018-0315 | Critical | 9.8 | 2018-06-07 | A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote at… |
CVE-2018-0296 | High | 7.5 | 2018-06-07 | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device… |
CVE-2018-0274 | High | 8.8 | 2018-06-07 | A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to execute arbitrary shell command… |
CVE-2018-0263 | High | 7.4 | 2018-06-07 | A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal device interfaces of an… |
CVE-2018-3739 | Critical | 9.1 | 2018-06-07 | https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized memory leak in setu… |
CVE-2018-3738 | Medium | 5.5 | 2018-06-07 | protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files. |
CVE-2018-3737 | High | 7.5 | 2018-06-07 | sshpk is vulnerable to ReDoS when parsing crafted invalid public keys. |
CVE-2018-3735 | Medium | 6.1 | 2018-06-07 | bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template |
CVE-2018-3732 | High | 7.5 | 2018-06-07 | resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which all… |
CVE-2018-3731 | High | 7.5 | 2018-06-07 | public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file… |
CVE-2018-3730 | High | 7.5 | 2018-06-07 | mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any fi… |
CVE-2018-3729 | High | 7.5 | 2018-06-07 | localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any f… |
CVE-2018-3727 | High | 7.5 | 2018-06-07 | 626 node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with k… |
CVE-2018-3726 | Medium | 6.1 | 2018-06-07 | crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names. |
CVE-2018-3725 | High | 7.5 | 2018-06-07 | hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read content of any file with… |
CVE-2018-3724 | High | 7.5 | 2018-06-07 | general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious user to read conten… |
CVE-2018-3723 | High | 8.8 | 2018-06-07 | defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the… |
CVE-2018-3722 | High | 8.8 | 2018-06-07 | merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the pro… |
CVE-2018-3721 | Medium | 6.5 | 2018-06-07 | lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and mergeWith functions, w… |
CVE-2018-3720 | High | 8.8 | 2018-06-07 | assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the pr… |
CVE-2018-3719 | High | 8.8 | 2018-06-07 | mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious user to modify the pro… |
CVE-2018-3718 | Medium | 5.3 | 2018-06-07 | serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded. |
CVE-2018-3717 | Medium | 5.4 | 2018-06-07 | connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware. |
CVE-2018-3716 | Medium | 5.4 | 2018-06-07 | simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names. |
CVE-2018-3715 | Medium | 6.5 | 2018-06-07 | glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to re… |
CVE-2018-3714 | Medium | 6.5 | 2018-06-07 | node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read content of any file wi… |
CVE-2018-3713 | Medium | 6.5 | 2018-06-07 | angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to rea… |
CVE-2018-3712 | Medium | 6.5 | 2018-06-07 | serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a m… |
CVE-2018-3711 | High | 7.5 | 2018-06-07 | Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" and a very large paylo… |
CVE-2018-5850 | High | 7.8 | 2018-06-06 | In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all An… |
CVE-2018-5846 | High | 7.8 | 2018-06-06 | A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_… |
CVE-2018-5845 | High | 7.0 | 2018-06-06 | A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android releases from CAF (A… |
CVE-2018-5841 | High | 7.8 | 2018-06-06 | dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could lead to an invalid acc… |
CVE-2018-5840 | High | 7.8 | 2018-06-06 | Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firef… |
CVE-2018-3852 | High | 7.5 | 2018-06-06 | An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a… |
CVE-2018-3580 | High | 7.8 | 2018-06-06 | Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in all Android releases from CAF (Android… |
CVE-2018-3578 | High | 7.8 | 2018-06-06 | Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overflow in all Android… |
CVE-2018-3565 | High | 7.8 | 2018-06-06 | While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) us… |
CVE-2018-3562 | Medium | 5.5 | 2018-06-06 | Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) us… |