2018 CVEs (page 122)
Page 122 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-11134 | High | 8.8 | 2018-05-31 | In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs wit… |
CVE-2018-11133 | Medium | 6.1 | 2018-05-31 | The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scriptin… |
CVE-2018-11132 | High | 8.8 | 2018-05-31 | In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue that runs daemonized w… |
CVE-2018-11625 | High | 8.8 | 2018-05-31 | In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file. |
CVE-2018-11624 | High | 8.8 | 2018-05-31 | In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file. |
CVE-2018-11598 | High | 7.1 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafted input files via… |
CVE-2018-11597 | Medium | 5.5 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsi… |
CVE-2018-11596 | Medium | 5.5 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsi… |
CVE-2018-11595 | High | 7.8 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user crafted input file… |
CVE-2018-11594 | Medium | 5.5 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow during syntax parsi… |
CVE-2018-11593 | High | 7.1 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) and potential Information Disclosure with a user crafted input file via… |
CVE-2018-11592 | Medium | 5.5 | 2018-05-31 | Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds Read during syntax p… |
CVE-2018-11591 | Medium | 5.5 | 2018-05-31 | Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer dereference during syn… |
CVE-2018-11590 | Medium | 5.5 | 2018-05-31 | Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflow during syntax par… |
CVE-2018-11220 | High | 8.8 | 2018-05-31 | Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function. |
CVE-2018-5388 | Medium | 6.5 | 2018-05-31 | In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial o… |
CVE-2018-9322 | High | 7.8 | 2018-05-31 | The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through… |
CVE-2018-9320 | High | 7.8 | 2018-05-31 | The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through… |
CVE-2018-9318 | Critical | 9.8 | 2018-05-31 | The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a… |
CVE-2018-9314 | Medium | 6.8 | 2018-05-31 | The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through… |
CVE-2018-9313 | Medium | 5.3 | 2018-05-31 | The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through… |
CVE-2018-9312 | High | 7.8 | 2018-05-31 | The Head Unit HU_NBT (aka Infotainment) component on BMW i Series, BMW X Series, BMW 3 Series, BMW 5 Series, and BMW 7 Series vehicles produced in 2012 through… |
CVE-2018-9311 | Critical | 9.8 | 2018-05-31 | The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a… |
CVE-2018-11036 | Critical | 9.1 | 2018-05-31 | Ruckus SmartZone (formerly Virtual SmartCell Gateway or vSCG) 3.5.0, 3.5.1, 3.6.0, and 3.6.1 (Essentials and High Scale) on vSZ, SZ-100, SZ-300, and SCG-200 de… |
CVE-2018-11583 | Medium | 6.1 | 2018-05-31 | SeaCMS 6.61 has stored XSS in admin_collect.php via the siteurl parameter. |
CVE-2018-11580 | Medium | 5.4 | 2018-05-31 | An issue was discovered in mass-pages-posts-creator.php in the MULTIDOTS Mass Pages/Posts Creator plugin 1.2.2 for WordPress. Any logged in user can launch Mas… |
CVE-2018-11579 | Medium | 5.3 | 2018-05-31 | class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulne… |
CVE-2018-11578 | Medium | 6.5 | 2018-05-31 | GifIndexToTrueColor in ngiflib.c in MiniUPnP ngiflib 0.4 has a Segmentation fault. |
CVE-2018-11577 | High | 8.8 | 2018-05-31 | Liblouis 3.5.0 has a Segmentation fault in lou_logPrint in logging.c. |
CVE-2018-11576 | Critical | 9.8 | 2018-05-31 | ngiflib.c in MiniUPnP ngiflib 0.4 has a heap-based buffer over-read in GifIndexToTrueColor. |
CVE-2018-11575 | Critical | 9.8 | 2018-05-31 | ngiflib.c in MiniUPnP ngiflib 0.4 has a stack-based buffer overflow in DecodeGifImg. |
CVE-2018-11572 | Medium | 5.4 | 2018-05-31 | ClipperCMS 1.3.3 has XSS in the "Module name" field in a "Modules -> Manage modules -> edit" action to the manager/ URI. |
CVE-2018-11571 | High | 8.8 | 2018-05-31 | ClipperCMS 1.3.3 allows Session Fixation. |
CVE-2018-11568 | Medium | 6.1 | 2018-05-30 | Reflected XSS is possible in the GamePlan theme through 1.5.13.2 for WordPress because of insufficient input sanitization, as demonstrated by the s parameter… |
CVE-2018-11567 | Low | 3.3 | 2018-05-30 | Prior to 2018-04-27, the reprompt feature in Amazon Echo devices could be misused by a custom Alexa skill. The reprompt feature is designed so that if Alexa do… |
CVE-2018-7534 | Medium | 4.7 | 2018-05-30 | In Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key may be left in memory. |
CVE-2018-11565 | Medium | 5.3 | 2018-05-30 | Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.04 before 18.04.1 are vulnerable to mentioning the usernames that are already taken by people regis… |
CVE-2018-11482 | Critical | 9.8 | 2018-05-30 | /usr/lib/lua/luci/websys.lua on TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices has a hardcoded zMiVw8Kw0oxKXL0 password. |
CVE-2018-11481 | High | 8.8 | 2018-05-30 | TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, and TL-IPC40A-4 devices allow authenticated remote code execution via crafted JSON data because /usr… |
CVE-2018-11478 | High | 8.8 | 2018-05-30 | An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The OBD port is used to receive measurement data and debug information from the car. This on… |
CVE-2018-11477 | Medium | 6.5 | 2018-05-30 | An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The data packets that are sent between the iOS or Android application and the OBD dongle are… |
CVE-2018-11476 | High | 8.8 | 2018-05-30 | An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The dongle opens an unprotected wireless LAN that cannot be configured with encryption or a… |
CVE-2018-10939 | Medium | 6.1 | 2018-05-30 | Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group. |
CVE-2018-10196 | Medium | 5.5 | 2018-05-30 | NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to… |
CVE-2018-11562 | Medium | 6.1 | 2018-05-30 | An issue was discovered in MISP 2.4.91. A vulnerability in app/View/Elements/eventattribute.ctp allows reflected XSS if a user clicks on a malicious link for a… |
CVE-2018-11518 | High | 8.1 | 2018-05-30 | A vulnerability allows a phreaking attack on HCL legacy IVR systems that do not use VoIP. These IVR systems rely on various frequencies of audio signals; based… |
CVE-2018-10995 | Medium | 5.3 | 2018-05-30 | SchedMD Slurm before 17.02.11 and 17.1x.x before 17.11.7 mishandles user names (aka user_name fields) and group ids (aka gid fields). |
CVE-2018-11439 | Medium | 6.5 | 2018-05-30 | The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-… |
CVE-2018-11438 | High | 8.8 | 2018-05-30 | The mobi_decompress_lz77 function in compression.c in Libmobi 0.3 allows remote attackers to cause remote code execution (heap-based buffer overflow) via a cra… |
CVE-2018-11437 | Medium | 6.5 | 2018-05-30 | The mobi_reconstruct_parts function in parse_rawml.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) via a craft… |
CVE-2018-11436 | Medium | 6.5 | 2018-05-30 | The buffer_addraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi… |
CVE-2018-11435 | Medium | 6.5 | 2018-05-30 | The mobi_decompress_huffman_internal function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (read access violation) v… |
CVE-2018-11434 | Medium | 6.5 | 2018-05-30 | The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted… |
CVE-2018-11433 | Medium | 6.5 | 2018-05-30 | The mobi_get_kf8boundary_seqnumber function in util.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via… |
CVE-2018-11432 | Medium | 6.5 | 2018-05-30 | The mobi_parse_mobiheader function in read.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted… |
CVE-2018-11559 | Medium | 5.4 | 2018-05-30 | DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter. |
CVE-2018-11558 | Medium | 5.4 | 2018-05-30 | DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter. |
CVE-2018-11557 | Medium | 6.1 | 2018-05-30 | YIBAN Easy class education platform 2.0 has XSS via the articlelist.php k parameter. |
CVE-2018-11556 | High | 7.8 | 2018-05-30 | tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafted TIFF file. NOTE… |
CVE-2018-11555 | High | 7.8 | 2018-05-30 | tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file. NOTE: Little CMS de… |
CVE-2018-11235 | High | 7.8 | 2018-05-30 | In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur. With a craft… |
CVE-2018-11233 | High | 7.5 | 2018-05-30 | In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can re… |
CVE-2018-11549 | Medium | 5.4 | 2018-05-29 | An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account Settings -> Member Centre -> Chinese information -> Ordinary member"… |
CVE-2018-11548 | High | 7.5 | 2018-05-29 | An issue was discovered in EOS.IO DAWN 4.2. plugins/net_plugin/net_plugin.cpp does not limit the number of P2P connections from the same source IP address. |
CVE-2018-11547 | Critical | 9.8 | 2018-05-29 | md_is_link_reference_definition_helper in md4c 0.2.5 has a heap-based buffer over-read because md_is_link_label mishandles loop termination. |
CVE-2018-11546 | Critical | 9.8 | 2018-05-29 | md4c 0.2.5 has a heap-based buffer over-read because md_is_named_entity_contents has an off-by-one error. |
CVE-2018-11545 | Critical | 9.8 | 2018-05-29 | md4c 0.2.5 has a heap-based buffer overflow in md_merge_lines because md_is_link_label mishandles the case of a link label composed solely of backslash escapes. |
CVE-2018-11544 | Critical | 9.8 | 2018-05-29 | The Olive Tree Ftp Server application 1.32 for Android has Insecure Data Storage because a username and password are stored in the /data/data/com.theolivetree… |
CVE-2018-6964 | High | 7.8 | 2018-05-29 | VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary. Successf… |
CVE-2018-3745 | Critical | 9.1 | 2018-05-29 | atob 2.0.3 and earlier allocates uninitialized Buffers when number is passed in input on Node.js 4.x and below. |
CVE-2018-3744 | Critical | 9.8 | 2018-05-29 | The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL. |
CVE-2018-3734 | High | 7.5 | 2018-05-29 | stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file wi… |
CVE-2018-3733 | High | 7.5 | 2018-05-29 | crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read… |
CVE-2018-11392 | High | 8.8 | 2018-05-29 | An arbitrary file upload vulnerability in /classes/profile.class.php in Jigowatt "PHP Login & User Management" before 4.1.1, as distributed in the Envato Marke… |
CVE-2018-11027 | Medium | 6.1 | 2018-05-29 | A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML. |
CVE-2018-10751 | Medium | 5.3 | 2018-05-29 | A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Extension portion of the WbXml payload. T… |
CVE-2018-10466 | Critical | 9.8 | 2018-05-29 | Zoho ManageEngine ADAudit Plus before 5.0.0 build 5100 allows blind SQL Injection. |
CVE-2018-1495 | Medium | 6.5 | 2018-05-29 | IBM FlashSystem V840 and V900 products could allow an authenticated attacker with specialized access to overwrite arbitrary files which could cause a denial of… |
CVE-2018-1242 | Medium | 6.5 | 2018-05-29 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contains a command injection vulnerability in the Boxmgmt CLI… |
CVE-2018-1241 | High | 8.8 | 2018-05-29 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-tex… |
CVE-2018-1235 | Critical | 9.8 | 2018-05-29 | Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated… |
CVE-2018-5241 | Critical | 9.8 | 2018-05-29 | Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products c… |
CVE-2018-1376 | Medium | 6.1 | 2018-05-29 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c… |
CVE-2018-1375 | Medium | 5.9 | 2018-05-29 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not renew a session variable after a successful authentication which could lead to session fixati… |
CVE-2018-1370 | Medium | 4.2 | 2018-05-29 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read o… |
CVE-2018-1369 | Low | 3.7 | 2018-05-29 | IBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorize… |
CVE-2018-11536 | Critical | 9.8 | 2018-05-29 | md4c before 0.2.5 has a heap-based buffer overflow because md_split_simple_pairing_mark mishandles splits. |
CVE-2018-11535 | Critical | 9.8 | 2018-05-29 | An issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0. The parameter "my_item_search" in users.php is exploitable using SQL injection. |
CVE-2018-11532 | Medium | 6.1 | 2018-05-29 | An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demonstrated by a subject field. |
CVE-2018-11531 | Critical | 9.8 | 2018-05-29 | Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp. |
CVE-2018-11528 | Critical | 9.8 | 2018-05-29 | WUZHI CMS 4.1.0 has SQL Injection via an api/sms_check.php?param= URI. |
CVE-2018-11527 | High | 8.8 | 2018-05-29 | An issue was discovered in CScms v4.1. A Cross-site request forgery (CSRF) vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the adm… |
CVE-2018-11523 | Critical | 9.8 | 2018-05-29 | upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files. |
CVE-2018-11488 | High | 7.5 | 2018-05-29 | A stack exhaustion vulnerability in the search function of dtSearch 7.90.8538.1 and prior allows remote attackers to cause a denial of service condition by sen… |
CVE-2018-10732 | Medium | 5.3 | 2018-05-28 | The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a username is valid) because of profile pi… |
CVE-2018-11517 | Medium | 5.3 | 2018-05-28 | mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter values from 870000 to 875000 in t=0&rq=0 re… |
CVE-2018-11516 | High | 8.8 | 2018-05-28 | The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attackers to cause a denial of service (heap co… |
CVE-2018-11430 | Medium | 5.4 | 2018-05-28 | An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display them in a list in the modCP. The XSS is… |
CVE-2018-11309 | Critical | 9.8 | 2018-05-28 | Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL datab… |
CVE-2018-11515 | Critical | 9.8 | 2018-05-28 | The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter. |