2018 CVEs (page 12)
Page 12 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10727 | Medium | 6.1 | 2019-10-29 | Reflected Cross-Site Scripting (XSS) vulnerability in the fabrik_referrer hidden field in the Fabrikar Fabrik component through v3.8.1 for Joomla! allows remot… |
CVE-2018-3300 | Medium | 5.4 | 2019-10-16 | Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected… |
CVE-2018-2875 | Medium | 5.0 | 2019-10-16 | Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnera… |
CVE-2018-21028 | High | 7.5 | 2019-10-11 | Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function. |
CVE-2018-21027 | Critical | 9.8 | 2019-10-11 | Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM) condition because malloc is mishandled. |
CVE-2018-20582 | High | 8.8 | 2019-10-11 | The GREE+ (aka com.gree.greeplus) application 1.4.0.8 for Android suffers from Cross Site Request Forgery. |
CVE-2018-5745 | Medium | 4.9 | 2019-10-09 | "managed-keys" is a feature which allows a BIND resolver to automatically maintain the keys used by trust anchors which operators configure for use in DNSSEC v… |
CVE-2018-5744 | High | 7.5 | 2019-10-09 | A failure to free memory can occur when processing messages having a specific combination of EDNS options. Versions affected are: BIND 9.10.7 -> 9.10.8-P1, 9.1… |
CVE-2018-5743 | High | 7.5 | 2019-10-09 | By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable paramete… |
CVE-2018-5732 | High | 7.5 | 2019-10-09 | Failure to properly bounds-check a buffer used for processing DHCP options allows a malicious server (or an entity masquerading as a server) to cause a buffer… |
CVE-2018-21024 | Critical | 9.8 | 2019-10-08 | licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request. |
CVE-2018-21025 | Critical | 9.8 | 2019-10-08 | In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files. |
CVE-2018-21023 | High | 8.8 | 2019-10-08 | getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter. |
CVE-2018-21022 | High | 8.8 | 2019-10-08 | makeXML_ListServices.php in Centreon Web before 2.8.28 allows attackers to perform SQL injections via the host_id parameter. |
CVE-2018-21021 | High | 8.8 | 2019-10-08 | img_gantt.php in Centreon Web before 2.8.27 allows attackers to perform SQL injections via the host_id parameter. |
CVE-2018-21020 | High | 7.5 | 2019-10-08 | In very rare cases, a PHP type juggling vulnerability in centreonAuth.class.php in Centreon Web before 2.8.27 allows attackers to bypass authentication mechani… |
CVE-2018-18379 | Medium | 6.1 | 2019-10-07 | The elementor-edit-template class in wp-admin/customize.php in the Elementor Pro plugin before 2.0.10 for WordPress has XSS. |
CVE-2018-11768 | High | 7.5 | 2019-10-04 | In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in… |
CVE-2018-16452 | High | 7.5 | 2019-10-03 | The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion. |
CVE-2018-16451 | High | 7.5 | 2019-10-03 | The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN. |
CVE-2018-16301 | High | 7.8 | 2019-10-03 | The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile(). To trigger this vulnerability the attacker needs to… |
CVE-2018-16300 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion. |
CVE-2018-16230 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI). |
CVE-2018-16229 | High | 7.5 | 2019-10-03 | The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option(). |
CVE-2018-16228 | High | 7.5 | 2019-10-03 | The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix(). |
CVE-2018-16227 | High | 7.5 | 2019-10-03 | The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield. |
CVE-2018-14882 | High | 7.5 | 2019-10-03 | The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c. |
CVE-2018-14881 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART). |
CVE-2018-14880 | High | 7.5 | 2019-10-03 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr(). |
CVE-2018-14879 | High | 7.0 | 2019-10-03 | The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file(). |
CVE-2018-14470 | High | 7.5 | 2019-10-03 | The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2(). |
CVE-2018-14469 | High | 7.5 | 2019-10-03 | The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print(). |
CVE-2018-14468 | High | 7.5 | 2019-10-03 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). |
CVE-2018-14467 | High | 7.5 | 2019-10-03 | The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP). |
CVE-2018-14466 | High | 7.5 | 2019-10-03 | The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert(). |
CVE-2018-14465 | High | 7.5 | 2019-10-03 | The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print(). |
CVE-2018-14464 | High | 7.5 | 2019-10-03 | The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs(). |
CVE-2018-14463 | High | 7.5 | 2019-10-03 | The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167. |
CVE-2018-14462 | High | 7.5 | 2019-10-03 | The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print(). |
CVE-2018-14461 | High | 7.5 | 2019-10-03 | The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print(). |
CVE-2018-10105 | Critical | 9.8 | 2019-10-03 | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2). |
CVE-2018-10103 | Critical | 9.8 | 2019-10-03 | tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2). |
CVE-2018-9581 | Low | 3.3 | 2019-09-27 | In WiFi, the RSSI value and SSID information is broadcast as part of android.net.wifi.RSSI_CHANGE and android.net.wifi.STATE_CHANGE intents. This could lead to… |
CVE-2018-9425 | High | 7.8 | 2019-09-27 | In Platform, there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege wit… |
CVE-2018-19592 | High | 7.8 | 2019-09-27 | The "CLink4Service" service is installed with Corsair Link 4.9.7.35 with insecure permissions by default. This allows unprivileged users to take control of the… |
CVE-2018-11782 | Medium | 6.5 | 2019-09-26 | In Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve server process may exit when a well-formed read-only request pr… |
CVE-2018-9090 | Medium | 6.1 | 2019-09-24 | CoreOS Tectonic 1.7.x and 1.8.x before 1.8.7-tectonic.2 deploys the Grafana web application using default credentials (admin/admin) for the administrator accou… |
CVE-2018-21019 | High | 7.5 | 2019-09-23 | Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via compo… |
CVE-2018-21018 | Critical | 9.8 | 2019-09-22 | Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions. |
CVE-2018-17789 | Medium | 6.5 | 2019-09-20 | Prospecta Master Data Online (MDO) allows CSRF. |
CVE-2018-11200 | Medium | 6.1 | 2019-09-20 | An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field. |
CVE-2018-1847 | Medium | 6.5 | 2019-09-18 | IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.0.0.0 thro… |
CVE-2018-7820 | Critical | 9.8 | 2019-09-17 | A Credentials Management CWE-255 vulnerability exists in the APC UPS Network Management Card 2 AOS v6.5.6, which could cause Remote Monitoring Credentials to b… |
CVE-2018-20336 | High | 7.5 | 2019-09-17 | An issue was discovered in ASUSWRT 3.0.0.4.384.20308. There is a stack-based buffer overflow issue in parse_req_queries function in wanduck.c via a long string… |
CVE-2018-21017 | Medium | 6.5 | 2019-09-16 | GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c. |
CVE-2018-21016 | Medium | 6.5 | 2019-09-16 | audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and app… |
CVE-2018-21015 | Medium | 6.5 | 2019-09-16 | AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… |
CVE-2018-7081 | Critical | 9.8 | 2019-09-13 | A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS. An attacker with the ability to transmit speciall… |
CVE-2018-17200 | Critical | 9.8 | 2019-09-11 | The Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests for HTTP services via the /webtools/control/httpService endpoin… |
CVE-2018-21014 | Medium | 5.4 | 2019-09-09 | The buddyboss-media plugin through 3.2.3 for WordPress has stored XSS. |
CVE-2018-21013 | Critical | 9.8 | 2019-09-09 | The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath t… |
CVE-2018-21012 | Medium | 6.1 | 2019-09-09 | The cf7-invisible-recaptcha plugin before 1.3.2 for WordPress has XSS. |
CVE-2018-21011 | High | 7.5 | 2019-09-09 | The charitable plugin before 1.5.14 for WordPress has unauthorized access to user and donation details. |
CVE-2018-11198 | Medium | 6.1 | 2019-09-06 | An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json. |
CVE-2018-18630 | High | 7.8 | 2019-09-06 | A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local… |
CVE-2018-6240 | High | 7.8 | 2019-09-06 | NVIDIA Tegra contains a vulnerability in BootRom where a user with kernel level privileges can write an arbitrary value to an arbitrary physical address |
CVE-2018-11569 | Critical | 9.8 | 2019-09-05 | Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2. |
CVE-2018-21010 | High | 8.8 | 2019-09-05 | OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_profile in bin/common/color.c. |
CVE-2018-21009 | High | 8.8 | 2019-09-05 | Poppler before 0.66.0 has an integer overflow in Parser::makeStream in Parser.cc. |
CVE-2018-21008 | Medium | 5.5 | 2019-09-04 | An issue was discovered in the Linux kernel before 4.16.7. A use-after-free can be caused by the function rsi_mac80211_detach in the file drivers/net/wireless/… |
CVE-2018-18371 | Medium | 6.5 | 2019-08-30 | The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. An information… |
CVE-2018-18370 | Medium | 6.1 | 2019-08-30 | The ASG/ProxySG FTP proxy WebFTP mode allows intercepting FTP connections where a user accesses an FTP server via a ftp:// URL in a web browser. A stored cross… |
CVE-2018-15513 | Medium | 5.3 | 2019-08-30 | Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role. |
CVE-2018-15512 | Medium | 6.1 | 2019-08-30 | Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web s… |
CVE-2018-15511 | Medium | 6.1 | 2019-08-30 | Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web s… |
CVE-2018-15510 | Medium | 6.1 | 2019-08-30 | Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitrary web script or H… |
CVE-2018-21007 | Critical | 9.8 | 2019-08-29 | The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads. |
CVE-2018-21006 | High | 8.8 | 2019-08-27 | The bbp-move-topics plugin before 1.1.6 for WordPress has CSRF. |
CVE-2018-21005 | Critical | 9.8 | 2019-08-27 | The bbp-move-topics plugin before 1.1.6 for WordPress has code injection. |
CVE-2018-21004 | Critical | 9.8 | 2019-08-27 | The rsvpmaker plugin before 5.6.4 for WordPress has SQL injection. |
CVE-2018-21003 | Critical | 9.8 | 2019-08-27 | The buddyforms plugin before 2.2.8 for WordPress has SQL injection. |
CVE-2018-21002 | High | 8.8 | 2019-08-27 | The js-support-ticket plugin before 2.0.6 for WordPress has CSRF. |
CVE-2018-21001 | Medium | 6.1 | 2019-08-27 | The anycomment plugin before 0.0.33 for WordPress has XSS. |
CVE-2018-18668 | Medium | 6.1 | 2019-08-26 | GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_for… |
CVE-2018-20998 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the arrayfire crate before 3.6.0 for Rust. Addition of the repr() attribute to an enum is mishandled, leading to memory corruption. |
CVE-2018-20997 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the openssl crate before 0.10.9 for Rust. A use-after-free occurs in CMS Signing. |
CVE-2018-20996 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling. |
CVE-2018-20995 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption because deque updates are mishandled. |
CVE-2018-20989 | High | 7.5 | 2019-08-26 | An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic. |
CVE-2018-21000 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the safe-transmute crate before 0.10.1 for Rust. A constructor's arguments are in the wrong order, causing heap memory corruption. |
CVE-2018-20999 | High | 7.5 | 2019-08-26 | An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results. |
CVE-2018-20991 | Critical | 9.8 | 2019-08-26 | An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free. |
CVE-2018-20994 | High | 7.5 | 2019-08-26 | An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled. |
CVE-2018-20993 | High | 7.5 | 2019-08-26 | An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization. |
CVE-2018-20992 | Medium | 6.5 | 2019-08-26 | An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled. |
CVE-2018-20990 | High | 7.5 | 2019-08-26 | An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive. |
CVE-2018-13367 | Medium | 5.3 | 2019-08-23 | An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, mod… |
CVE-2018-20987 | Critical | 9.8 | 2019-08-22 | The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection. |
CVE-2018-20986 | Medium | 5.4 | 2019-08-22 | The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors. |
CVE-2018-20988 | High | 7.5 | 2019-08-22 | The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation. |