2018 CVEs (page 124)
Page 124 of 162 — CVEs published in 2018, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000037 | Medium | 5.5 | 2018-05-24 | In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafte… |
CVE-2018-1000036 | Medium | 5.5 | 2018-05-24 | In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file. |
CVE-2018-11411 | High | 7.5 | 2018-05-24 | The transferFrom function of a smart contract implementation for DimonCoin (FUD), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer all… |
CVE-2018-11410 | Critical | 9.8 | 2018-05-24 | An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of… |
CVE-2018-11405 | High | 8.8 | 2018-05-24 | Kliqqi 2.0.2 has CSRF in admin/admin_users.php. |
CVE-2018-11404 | Medium | 6.1 | 2018-05-24 | DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter. |
CVE-2018-11403 | Medium | 5.4 | 2018-05-24 | DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter. |
CVE-2018-11402 | Medium | 6.6 | 2018-05-24 | SimpliSafe Original has Unencrypted Keypad Transmissions, which allows physically proximate attackers to discover the PIN. |
CVE-2018-11401 | Medium | 4.6 | 2018-05-24 | In SimpliSafe Original, RF Interference (e.g., an extremely strong 433.92 MHz signal) by a physically proximate attacker does not cause a notification. |
CVE-2018-11400 | Medium | 4.6 | 2018-05-24 | In SimpliSafe Original, the Base Station fails to detect tamper attempts: it does not send a notification if a physically proximate attacker removes the batter… |
CVE-2018-11399 | Medium | 4.3 | 2018-05-24 | SimpliSafe Original has Unencrypted Sensor Transmissions, which allows physically proximate attackers to obtain potentially sensitive information about the spe… |
CVE-2018-10428 | Medium | 6.1 | 2018-05-23 | ILIAS before 5.1.26, 5.2.x before 5.2.15, and 5.3.x before 5.3.4, due to inconsistencies in parameter handling, is vulnerable to various instances of reflected… |
CVE-2018-6495 | Medium | 5.4 | 2018-05-23 | Cross-Site Scripting (XSS) in Micro Focus Universal CMDB, version 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.0, CMS, version 4.10, 4.11, 4.12, 4.13, 4… |
CVE-2018-10654 | High | 8.1 | 2018-05-23 | There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. |
CVE-2018-10653 | Critical | 9.8 | 2018-05-23 | There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. |
CVE-2018-10652 | High | 7.5 | 2018-05-23 | There is a Sensitive Data Leakage issue in Citrix XenMobile Server 10.7 before RP3. |
CVE-2018-10651 | Medium | 6.1 | 2018-05-23 | There are Open Redirect Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. |
CVE-2018-10650 | High | 7.8 | 2018-05-23 | There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. |
CVE-2018-10649 | Medium | 6.1 | 2018-05-23 | There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3. |
CVE-2018-10648 | Critical | 9.8 | 2018-05-23 | There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. |
CVE-2018-8898 | Critical | 9.8 | 2018-05-23 | A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B012" FWVer="3.10.0.24" FirmVer="TT_77616… |
CVE-2018-11231 | High | 8.1 | 2018-05-23 | In the Divido plugin for OpenCart, there is SQL injection. Attackers can use SQL injection to get some confidential information. |
CVE-2018-10357 | High | 8.8 | 2018-05-23 | A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to execute arbitrary code on vulnerable insta… |
CVE-2018-10356 | High | 8.8 | 2018-05-23 | A SQL injection remote code execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to execute arbitrary SQL statements on… |
CVE-2018-10355 | High | 7.0 | 2018-05-23 | An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installati… |
CVE-2018-10354 | High | 8.8 | 2018-05-23 | A command injection remote command execution vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary code… |
CVE-2018-10353 | Medium | 6.5 | 2018-05-23 | A SQL injection information disclosure vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to disclose sensitive informatio… |
CVE-2018-10352 | High | 8.8 | 2018-05-23 | A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due t… |
CVE-2018-10351 | High | 8.8 | 2018-05-23 | A vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a remote attacker to execute arbitrary SQL statements on vulnerable installations due t… |
CVE-2018-1193 | Medium | 5.3 | 2018-05-23 | Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. A remote user can set the X-Forwarded… |
CVE-2018-1310 | High | 7.5 | 2018-05-23 | Apache NiFi JMS Deserialization issue because of ActiveMQ client vulnerability. Malicious JMS content could cause denial of service. See ActiveMQ CVE-2015-5254… |
CVE-2018-1309 | Critical | 9.8 | 2018-05-23 | Apache NiFi External XML Entity issue in SplitXML processor. Malicious XML content could cause information disclosure or remote code execution. The fix to disa… |
CVE-2018-1125 | High | 7.5 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to a stack buffer overflow in pgrep. This vulnerability is mitigated by FORTIFY, as it involves strncat() to a st… |
CVE-2018-1123 | Low | 3.9 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maps a guard page at the end of t… |
CVE-2018-1122 | High | 7.3 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled directory, t… |
CVE-2018-8176 | High | 8.8 | 2018-05-23 | A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoi… |
CVE-2018-11396 | High | 7.5 | 2018-05-23 | ephy-session.c in libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via Java… |
CVE-2018-1126 | Medium | 4.8 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related… |
CVE-2018-1124 | High | 7.8 | 2018-05-23 | procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escal… |
CVE-2018-7295 | High | 8.1 | 2018-05-23 | ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a C… |
CVE-2018-11334 | High | 7.8 | 2018-05-23 | Windscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain privileges or cause a denial of service via \\.\pipe\WindscribeService. |
CVE-2018-11362 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LDSS dissector could crash. This was addressed in epan/dissectors/packet-ldss.c by avoiding a buff… |
CVE-2018-11361 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/dot11decrypt.c by avoiding a buffer overflow during FTE pr… |
CVE-2018-11360 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the GSM A DTAP dissector could crash. This was addressed in epan/dissectors/packet-gsm_a_dtap.c by fix… |
CVE-2018-11359 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the RRC dissector and other dissectors could crash. This was addressed in epan/proto.c by avoiding a N… |
CVE-2018-11358 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use… |
CVE-2018-11357 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the LTP dissector and other dissectors could consume excessive memory. This was addressed in epan/tvbu… |
CVE-2018-11356 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the DNS dissector could crash. This was addressed in epan/dissectors/packet-dns.c by avoiding a NULL p… |
CVE-2018-11355 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, the RTCP dissector could crash. This was addressed in epan/dissectors/packet-rtcp.c by avoiding a buffer overflow for packet status chunks. |
CVE-2018-11354 | High | 7.5 | 2018-05-22 | In Wireshark 2.6.0, the IEEE 1905.1a dissector could crash. This was addressed in epan/dissectors/packet-ieee1905.c by making a certain correction to string ha… |
CVE-2018-9019 | Critical | 9.8 | 2018-05-22 | SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accounta… |
CVE-2018-10095 | Medium | 6.1 | 2018-05-22 | Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter… |
CVE-2018-10094 | Critical | 9.8 | 2018-05-22 | SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without… |
CVE-2018-10092 | High | 8.0 | 2018-05-22 | The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command an… |
CVE-2018-6493 | High | 8.8 | 2018-05-22 | SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10… |
CVE-2018-6492 | Medium | 4.7 | 2018-05-22 | Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Netwo… |
CVE-2018-11384 | Medium | 5.5 | 2018-05-22 | The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted… |
CVE-2018-11383 | Medium | 5.5 | 2018-05-22 | The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file… |
CVE-2018-11382 | Medium | 5.5 | 2018-05-22 | The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a cra… |
CVE-2018-11381 | Medium | 5.5 | 2018-05-22 | The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) vi… |
CVE-2018-11380 | Medium | 5.5 | 2018-05-22 | The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via… |
CVE-2018-11379 | Medium | 5.5 | 2018-05-22 | The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a… |
CVE-2018-11378 | High | 7.8 | 2018-05-22 | The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file. |
CVE-2018-11377 | Medium | 5.5 | 2018-05-22 | The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a… |
CVE-2018-11376 | Medium | 5.5 | 2018-05-22 | The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a cr… |
CVE-2018-11375 | Medium | 5.5 | 2018-05-22 | The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a cra… |
CVE-2018-6494 | Medium | 5.4 | 2018-05-22 | Remote SQL Injection against the HP Service Manager Software Web Tier, version 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, may lead to unauthor… |
CVE-2018-11093 | Medium | 6.1 | 2018-05-22 | Cross-site scripting (XSS) vulnerability in the Link package for CKEditor 5 before 10.0.1 allows remote attackers to inject arbitrary web script through a craf… |
CVE-2018-11373 | Critical | 9.8 | 2018-05-22 | iScripts eSwap v2.4 has SQL injection via the "salelistdetailed.php" User Panel ToId parameter. |
CVE-2018-11372 | Critical | 9.8 | 2018-05-22 | iScripts eSwap v2.4 has SQL injection via the wishlistdetailed.php User Panel ToId parameter. |
CVE-2018-11371 | High | 8.8 | 2018-05-22 | SkyCaiji 1.2 allows CSRF to add an Administrator user. |
CVE-2018-6378 | Medium | 6.1 | 2018-05-22 | In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager. |
CVE-2018-11369 | Critical | 9.8 | 2018-05-22 | An issue was discovered in PbootCMS v1.0.9. There is a SQL Injection that can get important information from the database via the \apps\home\controller\ParserC… |
CVE-2018-11328 | Medium | 4.7 | 2018-05-22 | An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI containing a username and password when the Lo… |
CVE-2018-11327 | Medium | 4.3 | 2018-05-22 | An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with r… |
CVE-2018-11326 | Medium | 4.8 | 2018-05-22 | An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering s… |
CVE-2018-11325 | Critical | 9.8 | 2018-05-22 | An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or naviga… |
CVE-2018-11324 | Medium | 5.9 | 2018-05-22 | An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a ra… |
CVE-2018-11323 | High | 8.8 | 2018-05-22 | An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of user groups with higher permissions. |
CVE-2018-11322 | High | 7.5 | 2018-05-22 | An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webse… |
CVE-2018-11321 | Medium | 6.5 | 2018-05-22 | An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filt… |
CVE-2018-6963 | Medium | 5.5 | 2018-05-22 | VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL pointer deref… |
CVE-2018-6962 | High | 7.8 | 2018-05-22 | VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation. |
CVE-2018-1583 | Medium | 5.4 | 2018-05-22 | IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions. By sending a specially-crafted request, an authenticated attack… |
CVE-2018-11367 | High | 7.5 | 2018-05-22 | An issue was discovered in CppCMS before 1.2.1. There is a denial of service in the JSON parser module. |
CVE-2018-11366 | Medium | 6.1 | 2018-05-22 | init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled. This is… |
CVE-2018-3640 | Medium | 5.6 | 2018-05-22 | Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system… |
CVE-2018-3639 | Medium | 5.5 | 2018-05-22 | Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are know… |
CVE-2018-11329 | High | 7.5 | 2018-05-22 | The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoA… |
CVE-2018-11365 | High | 7.5 | 2018-05-22 | sas/readstat_sas7bcat_read.c in libreadstat.a in ReadStat 0.1.1 has an infinite loop. |
CVE-2018-11364 | High | 7.5 | 2018-05-22 | sav_parse_machine_integer_info_record in spss/readstat_sav_read.c in libreadstat.a in ReadStat 0.1.1 has a memory leak related to an iconv_open call. |
CVE-2018-11363 | High | 7.5 | 2018-05-22 | jpeg_size in pdfgen.c in PDFGen before 2018-04-09 has a heap-based buffer over-read. |
CVE-2018-11346 | Medium | 4.3 | 2018-05-22 | An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "download_sys_settings"… |
CVE-2018-11345 | High | 8.8 | 2018-05-22 | An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the POST parameter filen… |
CVE-2018-11344 | Medium | 6.5 | 2018-05-22 | A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via t… |
CVE-2018-11343 | Medium | 5.4 | 2018-05-22 | A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payl… |
CVE-2018-11342 | Medium | 4.3 | 2018-05-22 | A path traversal vulnerability in fileExplorer.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a path to a file on the system to… |
CVE-2018-11341 | High | 7.2 | 2018-05-22 | Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter. |
CVE-2018-11340 | High | 7.2 | 2018-05-22 | An unrestricted file upload vulnerability in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data to a specified filename… |
CVE-2018-11339 | Medium | 6.1 | 2018-05-22 | An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment. |